The document discusses two-factor authentication solutions for the City of High Point, including RSA Authentication Manager for centralized management of multiple authentication methods like hard tokens, soft tokens, certificates, PINs, and biometrics. It describes how the city uses an RSA appliance hosting the main database and managing authentication, with disaster recovery provided by replicating the database to a second appliance. The city also uses Checkpoint and Netmotion with RSA SecurID tokens for two-factor authentication of remote and mobile connections to its network.

1. Two Factor
Authentication
Solution for the City of High Point

2. Two Factor Solutions
• Authenticators for two factor solutions
• Hard Tokens
• Soft Tokens
• Certificates
• Pin Numbers
• Passwords
• Biometrics
• Smart Cards

3. RSA Solutions
• RSA Authentication Manager
• Centralized Management
• Supports multiple methods of 2 factor authentication
• Scalable
Software Authenticators
Hardware Authenticators
Authentication Agents

4. Authenticators
• Token Code generators
• Hybrid Authenticators
• Smart Cards
• Software Token Applications
• Android, Blackberry, iPhone, iPad, Nokia, Windows Mobile
• Mac OS X, MS Windows
• SecurID Toolbar – Integrates with IE

5. Authentication Agents
• MS Windows
• Sun Java Web Server
• Apache Web Server
• IIS
• PAM – for Unix and Linux systems
• VPNs (Checkpoint/Netmotion)
• Many more network, and appliance based solutions

6. Our Solution
• We have an RSA Appliance hosting the main database and
managing our authentication
• The base purchase included the ability to replicate one copy of
our working database to another appliance for Disaster
Recovery and High Availability
• This appliance is to be located to our new Disaster Recovery
site in the near future.

7. Step by Step

8. Appendix

9. Remote/Mobile Connections
• We have used Checkpoint Secureclient, Checkpoint Endpoint
Connector, and Netmotion to provide mobile connections to
our network using RSA SecurID tokens to provide two factor
authentication when accessing sensitive servers on our
network.
• With the potential to move our applications to a Citrix
deployment, the same authentication can be used to provide
access to the future Citrix environment.

10. Architecture

11. MDT Connection