www.admiralsecure.com

Protecting sensitive communications

Introducing the Soho-Concentrator 5000 from Admiral – a new product line that secures sensitive facsimile communications from inadvertent or intentional disclosure. SC5000 ensures that confidential fax transmissions remain confidential. And Admiral has made it easy to install, easy to use and easy to manage.

Admiral's family of secure fax solutions ensures facsimile transmissions are delivered to their intended recipient every time; that the contents of the transmissions are never disclosed to unauthorized parties; that the sender of the facsimile is actually who they say they are; and that the message is always kept private and unaltered.

The secure “closed loop network” created by the SC5000™ is managed from a single logical and physical point within the entire network. This central management and monitoring enables the SC5000™ to gather and maintain a rich and detailed audit trail which demonstrates compliance with internal business processes and external regulatory compliance frameworks such as Sarbanes-Oxley, PIPEDA, HIPPA, EU. The SC5000™ adheres to stringent international security standards utilizing leading industry based cryptographic technology from Certicom.

Admiral Secure Facimile - Overview

Despite a rising awareness of the security risks in computer networks, many people don’t know that faxing unprotected, sensitive information over Public Switched Telephone Networks (PSTNs) exposes the information to the same kinds of threats as communicating via the Internet. SC5000 is designed to thwart these threats, providing a cost-effective and comprehensive fax security solution.

Why is Faxed Information at Risk?

The preferred way to send time-critical and sensitive information is by fax. Business proposals, medical records, press releases, contract awards, criminal records, personnel files – all highly sensitive information that, in the wrong hands could be very damaging.

Human error and curiosity are frequently the cause of fax security breaches. Pressing the wrong speed dial button sends a fax to the wrong location. Fax numbers are misdialed. Whether inadvertently or intentionally, sensitive information can be easily misdirected with serious consequences. Even if sent to the correct location, confidential faxes are seen and read while lying in a fax machine’s document handler until the intended recipient picks them up. Faxes can also fall prey to active interception. The materials required to intercept a fax are surprisingly inexpensive, readily acquired and easy to assemble. SC5000 has been specifically designed to prevent these kinds of security breaches, providing truly confidential transmissions.

The Admiral Solution

Admiral’s Soho-Concentrator 5000 (SC5000) can ensure faxes get to the intended recipient every time… that the contents are never disclosed to unauthorized parties… that the sender is who it claims to be and that the message is always kept private and unaltered.

SC5000 authenticates the sender and recipient, and then encrypts the data for secure transmission. The receiving SC5000 module stores the data in the intended recipient’s mailbox until he or she retrieves it.

Intuitive User Interface

Admiral delivers SC5000 ready to plug in and begin securing transmissions immediately. Basic send/receive functions. Either “in the clear” or encrypted, are transparent to the user. Access to other security functions can be incorporated directly into the dialing digits typed at the fax dial pad, or entered into the SC5000 keypad.

SC5000’s Dialing Digit Interface enables it to work seamlessly with advanced fax machine functions, such as delayed send, automatic redial on busy, and broadcast. Simply feed the document and enter the appropriate command. SC5000 reliably and securely handles the rest.

Security officers will also find SC5000 intuitive. The keypad interface, controlling access to security functions and administration, is easy to read and operate. The LCD display guides your Security Officer from setup to maintenance.

The Concentrator Security Manager (CSM) offers additional ease of maintenance by keeping a database of each SC5000 configuration. The CSM enables the Security Officer to change these settings through a standard Windows GUI interface, and schedule the implementation at a convenient time.

Scalable Security for Every Enterprise

SC5000 may be configured to any one of four secure access levels. Each access level demands additional authentication. SC5000”s scalability means cost-effective fax security for companies of any size, with established or growing security policies.

Two-Way Authentication

Rather than maintaining tables of all possible destinations, a time consuming and possibly daunting task in medium to large networks, SC5000 units authenticate each other using public-key certificates. Public-key certificates allow SC5000 to authenticate two parties who have never communicated before and had no prior knowledge of each other.

The certificate includes the name of a ‘domain’, which represents a grouping of secure fax machines. The CSM creates, signs and installs authorized domain certificates into the SC5000, enabling communications with all other SC5000 modules sharing the same domain. Each SC5000 can support up to 99 domain certificates, providing you with the capability to support secure fax transmissions amongst a vast network of authorized parties. SC5000 offers you the flexibility to group domains based on geography, function, security level or some other criteria that best suits your needs.

Installation and certification of a new SC5000 unit into a domain requires no configuration changes to existing SC5000 devices. Pre-programming a default domain further simplifies the user interface. With SC5000, you control where and to whom your sensitive information is transmitted.

Industry Standard Cryptography

Admiral has designed SC5000 around the strongest, most efficient public-key cryptography. SC5000 utilizes the Elliptic Curve Cryptosystem from Certicom Corp. – for all of its certificate generation, verification and key management functions.

Strong, Fast Encryption

SC5000 encodes faxed information using the Advanced Encryption Standard encryption algorithm. Unique key pars (or encryption values) are generated for each transmission, then destroyed once the fax has been successfully delivered.

Mailbox Storage and Retrieval

SC5000 offers mailboxing – secure storage and retrieval for incoming faxes. Encrypted fax images are stored in SC5000 memory, decrypted and released to the fax machine only when the user enters his/her unique User ID and PIN. SC5000 also notifies users when new faxes are waiting for retrieval.

Mailboxes may be created for domains as well as for individuals. The SC5000 series offers standard and high capacity mailboxes to store even the largest fax message.

Other Important Features

• Industry-standard public-key certificates (X.509) to authenticate sender/recipient.
• Secure Banner prints the words “Facsimile Secured by Admiral” on the top of every page to confirm secure receipt.
• Audit Trail logs all security related events. It can be printed to the local fax machine or collected by the CSM.
• Various reports show the status of users, domains, mailboxes and security settings.
• Emergency Zero-ize allows the administrator to clear all data in the SC5000 module.
• Tamper detection circuitry automatically zeroizes the unit in the event someone tries to open it.

Optional Hardware Random Generator

The SC5000 can be configured to include the RBG1210 Random Bit Generator from Tundra. This hardware device can ensure true randomness for cryptographic operations for those mission critical classified applications.

Secure Fax over IP

SC5000 can transmit your secure faxes over an IP network. Organizations that already have an IP network in place can take advantage of this to save any toll charges they might have incurred using the PSTN. Long distance secure call reliability may also increase as these are often noisy and frequently disconnect.

Managing Sensitive Communications

Introducing the Concentrator Security Manager from Admiral – a security management and certificate authority for virtual private fax networks. With the Concentrator Security Manager (CSM), security officers can oversee a vast network of virtual domains, devices and users while setting and monitoring policy from one central location.

Simple Configuration & Customization

Install wizards guide you through the configuration of domains, devices and users. Wizards allow you to override factory defaults and customize security options as dictated by your policy. Define relationships between domains, devices and users as well as create different permissions for domains and users on each device.

Contentrator Security Manager - Product Overview

Powerful Database Management

CSM maintains a database of configurations for each device under its control giving immediate access to all critical network information. Any values modified since the CSM’s last visit are displayed and flagged with a reminder icon (“ToDo’s”). Once the modification is installed, the “ToDo” icon disappears.

Immediate Knowledge and Resolution of Device Modifications

Once the CSM is connected, it immediately downloads security settings and compares them to settings in the CSM database. Any local modifications made to a device are identified and flagged for your evaluation.

Secure Authentication

Distance is no longer an issue for timely management of security policy. CSM conveniently connects to any device through a direct cable connection, a dial up connection over standard telephone lines, or through an IP network over the corporate LAN or even the Internet. CSM initializes and certifies SC5000 Soho-Concentrator devices locally or remotely. Ongoing management and maintenance services of networks and devices are handled remotely from a central location.

Certificate Authority CSM provides Certificate Authority services for the network of devices and is the only means of creating and installing privately certified domains.

Each private domain has its own public-key certificate signed by the CSM:

• Each private domain has its own public-key certificate signed by the CSM.
• Public-key certificates are loaded into each device that has authority to communicate within that domain.
• CSM can re-certify domains as required.

Built-In Schedules, Logs and Reports

CSM’s build in scheduler offers the flexibility of viewing and auditing critical information at your convenience.
The CSM scheduler can:
• Download transaction logs on a pre-determined schedule.
• Collect reports detailing mailbox usage, domain and user directory listings, system configurations and more.
• Initiate diagnostic functions on SC5000 devices and return results for later analysis.