Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity

    Caymas Offers Zone Defense

    By
    Andrew Garcia
    -
    September 5, 2005
    Share
    Facebook
    Twitter
    Linkedin

      Caymas Systems Inc.s Identity-Driven Access Gateways provide fine-grained access controls and hardware-accelerated encryption and packet inspection that allow IT administrators not only to simplify remote access to critical data resources but also to add identity-based access controls within the corporate network.

      Click here to read the full review of Caymas Identity-Driven Access Gateways.

      2

      Caymas Systems Inc.s Identity-Driven Access Gateways provide fine-grained access controls and hardware-accelerated encryption and packet inspection that allow IT administrators not only to simplify remote access to critical data resources but also to add identity-based access controls within the corporate network.

      At their heart, the Caymas 525 and Caymas 220 IDAGs are SSL (Secure Sockets Layer) VPNs on steroids. Integrated hardware-based encryption and inspection accelerators boost the number of possible concurrent connections and improve secure throughput performance enough to warrant internal deployment.

      Stateful and deep-packet inspection engines control access to network services and examine allowed traffic for suspicious payload. The IDAGs, when used with integrated endpoint assurance tools, combine to sanitize network traffic and connecting hosts.

      eWEEK Labs tested the Caymas 525 and Caymas 220, each running Software Release 3.0, which shipped in July. Release 3.0 introduces the Security Zones feature, which lets administrators create differing access policy restrictions depending on where a user connected from.

      We placed the Caymas 525, designed to accommodate 2,500 concurrent users, in front of our data center resources. We installed the Caymas 220, designed for 100 concurrent users, at the network perimeter. Using Security Zones, we configured for both appliances a single access policy that dictated much more stringent authentication and validation steps for remote users.

      Unlike other SSL VPN vendors, such as Juniper Networks Inc. and Aventail Corp., Caymas does not muck up its pricing by layering additional licensing costs for more users or features. Instead, each appliance comes with a flat price: The Caymas 525 costs $44,995, while the Caymas 220 costs $14,995.

      /zimages/3/28571.gifClick here to read Andrew Garcias comparative review four of SSL-based VPN appliances.

      The IDAG appliances provide several access methods: Secure Proxy is the standard reverse proxy for Web-based applications and file shares, while Secure Tunnel provides access to other TCP or UDP (User Datagram Protocol) network resources via either Java or ActiveX-based host redirector applets. Secure Connect is a driver-level control that provides full network access for Windows-based clients. The IDAGs also offer a Web Relay feature for redirecting more complex unencrypted Web applications.

      Security Zones allowed us to provide SSL VPN-based access to data center resources for internal users as well. We required internal users to provide log-in credentials to access resources in the data center, but we did not require end-point assurance scans or encryption. This let us easily track each users access to resources without taxing the gateways resources for largely trusted users.

      We could also deploy the Caymas appliances to isolate a public LAN segment. The Caymas gateways provide a captive portal, endpoint assurance checks and limited access rights for guest users. Software Release 3.0s new follow-me IP capability let us assign guests a static IP address via DHCP (Dynamic Host Configuration Protocol) relay.

      The endpoint assurance tests are powerful, but they require a lot of manual customization.

      Next page: Evaluation Shortlist: Related Products.

      Page 3

      Aventails EX Series Latest release dramatically improves TCP and UDP tunneling capabilities and controls (www.aventail.com)

      F5 Corp.s FirePass Series Superior all-around products with advanced endpoint security offerings (www.f5.com)

      Juniper Networks NetScreen-SA Series Juniper recently expanded its product line to bring its excellent platform to businesses large and small (www.juniper.net)

      Technical Analyst Andrew Garcia can be reached at andrew_garcia@ziffdavis.com.

      Check out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.

      Andrew Garcia
      Andrew cut his teeth as a systems administrator at the University of California, learning the ins and outs of server migration, Windows desktop management, Unix and Novell administration. After a tour of duty as a team leader for PC Magazine's Labs, Andrew turned to system integration - providing network, server, and desktop consulting services for small businesses throughout the Bay Area. With eWEEK Labs since 2003, Andrew concentrates on wireless networking technologies while moonlighting with Microsoft Windows, mobile devices and management, and unified communications. He produces product reviews, technology analysis and opinion pieces for eWEEK.com, eWEEK magazine, and the Labs' Release Notes blog. Follow Andrew on Twitter at andrewrgarcia, or reach him by email at agarcia@eweek.com.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Careers

      SThree’s Sunny Ackerman on Tech Hiring Trends

      James Maguire - June 9, 2022 0
      I spoke with Sunny Ackerman, President/Americas for tech recruiter SThree, about the tight labor market in the tech sector, and much needed efforts to...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×