Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

SafeWord authentication
Chapter 10: Setting Up Authentication
Supported authentication methods
The SafeWord family of authentication servers that interoperate with the
Sidewinder G2 includes SafeWord RemoteAccess and SafeWord
PremierAccess. The following table provides a reference to better understand
each server’s authentication capabilities when interoperating with Sidewinder
G2.
Table 24: Authentication capabilities of SafeWord servers
Feature/Capability
Sidewinder G2 authentication
methods supported
SafeWord
RemoteAccess
When connected to the Sidewinder G2 using standard RADIUS ports, the
authentication method is appropriately called RADIUS. This method is
available with both SafeWord RemoteAccess and SafeWord PremierAccess.
(For additional information on RADIUS, see “RADIUS authentication” on page
281.)
SafeWord PremierAccess provides the ability to use fixed passwords or
passcode authentication for Telnet and FTP sessions through the Sidewinder
G2, and can be used to authenticate logins and SSH logins to the Sidewinder
G2. Web sessions can also be authenticated, but are limited to using either
fixed passwords or passcodes without the challenge/response option. (Not all
tokens support this option.)
The biggest advantages of using a tightly coupled configuration such as
SafeWord PremierAccess authentication are the following:
• An improvement in performance over RADIUS
SafeWord
PremierAccess
RADIUS only SafeWord & RADIUS
Fixed passwords No Yes
Dynamic passcodes w/o
challenge
Dynamic passcodes with
challenge
Hardware tokens
only
No Yes
Hardware and
software tokens
Location of user database Active Directory SafeWord
Connectivity w/ Sidewinder G2 RADIUS ports only RADIUS ports or port
5030 (default)
279