Lark Allen response re: TPM interface to ISA Server 2004
----------------------------------------------------
May 27, 2004
To: Lark Allen/WAVE/US@WAVE_DOMAIN
Subject: MSFT ISA Server 2004
Lark,
The MSFT/HP announcement has TCG implications I
suppose, but as I understand it, the HP ProtectTools
suite referenced below is the broad product line and
does not specifically include it's client-side TPM
subset, HP ProtectTools Embedded Security.
My question is:
Does ISA Server 2004 support an interface with client
TPMs?
Steven mentioned the the recent CC that certain MSFT
server architectures support TPMs in the clients.
TIA
Lark Allen@WAVE_DOMAIN
05/27/2004 09:10 PM
Microsoft uses digital certificates as a standard approach for access
to VPNs,
and in their identity management applications. They use standard APIs
for
applications based on MS -CAPI (CryptoAPI). The testing we have done
with TPM
based platforms uses a Wave developed MS-CAPI interface that supports
TPMs for
the storage and authentication of certificates using the TPM. There's
nothing
I can see about the MS announcement that changes any of this so as far
as we can
see, the integration of TPM based clients with the MS ISA should still
be
straight forward. It allows enterprises to move from software based
security
in the client machines to hardware based security using TPMs. At the
same
time, the platforms themselves can be authenticated to determine that
they are
using hardware for security and that the platform itself is
trustworthy.
Thanks,
Lark
-------------------------------------------------
Technology leaders announce security solution built on
Microsoft ISA Server 2004 and unveil the HP
ProtectTools Suite for Microsoft products for
information security
At the Microsoft(R) Tech-Ed 2004 conference here, HP
(NYSE:HPQ) (Nasdaq:HPQ) and Microsoft Corporation
(Nasdaq:MSFT) today expanded their longstanding
relationship by announcing an agreement to market and
produce a hardware security solution built on
technology from the two companies. The HP ProLiant
DL320 Firewall/VPN/Cache Server running Microsoft
Internet Security &
Acceleration Server (ISA) 2004 addresses network and
perimeter security.
In addition, the companies announced the availability
of the HP ProtectTools Suite for Microsoft software,
which adds to the security functionality provided by
standard Microsoft products -- such as Microsoft
Exchange Server, Outlook(R) and Windows
Mobile(TM). HP's global security practice provides a
comprehensive range of information security services
that enable enterprise
customers to make faster, more confident business
decisions.
The Microsoft ISA Server 2004, part of the Windows
Server System(TM), is an advanced application layer
firewall, VPN and Web cache software solution that
enables customers to easily enhance existing IT
investments by improving network security and
performance. The HP ProLiant DL320 server running
Microsoft ISA Server 2004 is an integrated hardware
security solution designed
to help customers protect applications against new and
emerging threats. The HP ProLiant DL320 running
Microsoft ISA Server 2004 will be one of the first
security solutions running ISA Server 2004 that
delivers the flexibility of VPN, cache and firewall
capabilities.
"Businesses must remain securely operational in the
face of ever-increasing security threats -- this means
protecting highly sensitive business information,
privacy and business continuity," said Rick
Fricchione, vice president, enterprise Microsoft
services, HP. "Microsoft and HP are once again
collaborating to bring together the best people,
processes and technology to
help companies innovate, adapt and unleash new
business value and enhance enterprise-wide security."
HP ProLiant DL320 running Microsoft ISA Server 2004
provides customers with an easy-to-use and -manage
hardware security solution that can be quickly
deployed to help protect key business applications,
such as Microsoft Exchange Server, Outlook Web Access,
Internet Information Services and SharePoint(R)
Portal Server. In addition, ISA Server 2004
integration with Windows(R) Active Directory(R)
services enables administrators to use the solution to
apply group- and user-level policy and authentication
across a broad range of scenarios, including firewall
policy, VPN authentication and outbound Web proxy and
access control.
This ease of use makes the solution an ideal way to
improve the security of Windows Server(TM) 2003
networks. HP ProLiant DL320 running Microsoft ISA
Server 2004 also offers many options to add
third-party plug-ins, providing the opportunity to
further enhance network security and performance.
"Customers have told us that they need a broad range
of flexible solutions to help protect their
business-critical applications. Offering ISA Server
2004 through both software and hardware provides
customers with multiple options for addressing their
particular IT security requirements," said Mike Nash,
corporate vice president, Security Business and
Technology Unit, Microsoft.
"Today's announcement between Microsoft and HP
furthers our mutual commitment to make IT environments
more secure."
Pricing and availability
Expected to be available in the third quarter of 2004,
beginning at an estimated street price of $3,000,(1)
the HP ProLiant DL320 Firewall/VPN/Cache Server
running Microsoft ISA Server 2004 is expected to offer
one of the most affordable and full-featured security
solutions on the market.
More information about the HP ProLiant DL320 server is
available at
http://h18004.www1.hp.com/products/servers/proliantdl320/index.html
More information about Microsoft ISA Server 2004 is
available at
www.microsoft.com/isaserver/.
Close collaboration leads to innovation
For more than 20 years, HP and Microsoft have
collaborated on the research and development of
products and services that address the business needs
of customers. In addition to the new appliance, the
companies also are announcing the HP ProtectTools
Suite for Microsoft products, which helps address
customers' security requirements for e-mail, strong
user authentication, import and export of data from
multiple sources, terminal server access to
resources, and data security for mobile devices.
The suite includes:
-- HP ProtectTools Authentication Services: Mitigates
security
risks with strong user authentication systems.
-- HP ProtectTools Device Manager: Offers advanced
tools for
managing and auditing the import and export of data
from
multiple devices based on user privileges.
-- HP ProtectTools Role-based Access: Provides users
with
security enhanced terminal server access to diverse
role-based
facilities from a single desktop.
-- HP ProtectTools Email Release Manager: Provides
vital security
enhancements for Microsoft Exchange and Outlook
clients,
including facilities to electronically sign, encrypt
and audit
mail messages.
-- HP ProtectTools Windows Mobile: Toughens Windows
Mobile
security with features including password generation,
memory
erase, device locking and event logging.
In combination with the new products announced today,
HP offers a wide range of services to help enterprise
customers define security policies and procedures that
are automated and adaptable enough to provide
reliable, timely protection. Working together,
Microsoft and HP have jointly developed security
solutions that help address the needs of customers:
-- Security Patch Management -- a full lifecycle of
patch
management capabilities from initial assessment
through design
and implementation
-- Host Hardening -- identifies enterprise application
and
service vulnerabilities, assists in creating a
hardened
system, and works with customer staff to design and
develop a
security management process based on potential system
risks
and threats.
-- Secure Enterprise E-mail solutions with Microsoft
Exchange --
helps secure and harden enterprise e-mail with
solutions that
include inbound mail screening, outbound mail
certification,
authentication and data protection, and e-mail storage
and
retrieval.
Complete information about HP and Microsoft security
solutions is available online at
www.hp.com/go/security/microsoft.
News 
Market Data 
Discover 
AI
