Virtual Identity Server - LDAP Proxy Firewall: Securing and Protecting Active Directory is a presentation about Optimal IdM's VIS LDAP Proxy Firewall and why it is a wise decision for enterprises. It also tackles a comparison of using Active Directory alone and if it's enhanced with the best virtual directory server on the market today- the Virtual Identity Server.

1. VIRTUAL IDENTITY SERVER-
LDAP PROXY FIREWALL
Securing and Protecting Active
Directory

2. Overview
 Many organizations utilize an http web proxy
server, such as Microsoft’s Internet Security
and Acceleration (ISA) Server within their
web server environment.
 Likewise, the Optimal IdM’sVirtual Identity
Server™ (VIS™), deployed as an LDAP proxy
server offers this type of protection and
security for LDAP directories such as Active
Directory.

3. Figure 1: Microsoft’s Internet Security and
Acceleration (ISA) Server

4. Figure 2: The Virtual Identity Server Proxy

5. Features of the VIS
 Application SpecificViews
 Powerful Join & Merge Option
 Comprehensive Audit and Compliance
 Robust Scaling and Caching
 Extensible Solution
 Enhance Microsoft Centric Platform

6. Application Specific Views
 AD alone does not provide the ability to
controlWHAT is searched like specific LDAP
queries
 VIS only grants the data the application
requires
 Results to a more secure AD and increased
performance for both application and AD

7. Figure 3: Normal AD View vs. VIS
Filtered View

8. Powerful Join and Merge Options - Without
Custom Code
TheVirtual Identity Server can:
 Provide a single enterprise view of data across
multiple siloed directories
 Provide a different view of the data on an application
by application basis
 Allow different rights/access to data (i.e. update or
read only) on an application by application basis
 Transform, merge and map data from multiple LDAP
directories to a virtual name or namespace

9. Comprehensive Audit & Compliance
 VIS can help your organization meet audit
and compliance initiatives such as those
required by Sarbanes Oxley (SOX), Basel II,
European Union Privacy Directive, Capital
Accord HIPAA and Gramm-Leach-Bliley Act.
 Using the built-in web reporting , you can
easily report on who logged in and when, and
what changes they made. Reports can even
be auto-scheduled for email distribution in a
wide variety of formats (PDF, XLS, HTML).

10. Robust scaling & Caching
 TheVirtual Identity Server scales horizontally
or vertically to meet the needs of enterprise
deployments.
 VIS has built-in connection pooling, and full
support for failover and load balancers.

11. Extensible solution
 TheVirtual Identity Server can be extended
using any standard .NET programming
language such asVB.NET or C#
 Custom adapters can easily written
leveraging the baseVIS .NET objects that are
visible withinVisual Studio.

12. Enhanced microsoft centric
platform
 VIS leverages the existing investment in
Microsoft technology, extending it with
increased functionality.
 VIS is developed in .NET technology and is
designed to seamless integrate with your
Microsoft environment.

13. SUMMARY OF BENEFITS
Active Directory withVIS LDAP Proxy Firewall
 AD is more secure, applications no longer
accessAD directly
 Data leakage protection
 Complete auditing solution
 Built-in failover
 Built-in connection pooling to AD

14. More Benefits…
 50% reduction of application deployment
time
 Application deployment barriers eliminated
 Kerberos token size limit problem reduced
 Increased AD and application performance
 Leverages and extends the existing
investment in the Microsoft platform

15. These key features are just
the tip of the iceberg…
Want to learn more about the
Virtual Identity Server?
Visit http://www.optimalidm.com/