The Leader in Security for Mobile Handheld Devices -
Bluefire Mobile Security^TM Suite 3.5

Bluefire offers the most complete mobile security solution designed specifically
for handhelds with advanced mobile security management

Mobility and the Enterprise

Today, enterprises are recognizing the benefits of a mobilized workforce. Providing an employee with a mobile device can increase productivity and responsiveness to customers, delivering a ROI that far outweighs the initial cost of roll out. Once equipped with a mobile device, workers are no longer limited by the constraints of a work day; anytime, anywhere access to enterprise information that can be processed, acted upon, and delivered around the clock is a reality.

21^st Century Mobility: New Challenges

With ever-increasing processing power, large storage capacity and high speed connections via wireless networks, mobile devices can now fill roles once limited to desktop and laptop computers. Simply put, today’s mobile devices are part of modern enterprise networks.

At the same time, outside attacks on mobile devices are emerging. Hacking, data theft and distribution of malicious code, once limited to networked computers and laptops, are now occurring on mobile devices. Yet many IT departments fail to address mobile devices when developing and implementing network security standards and policies. Without proper security software and IT policies in effect, unprotected mobile devices have the potential to provide a  vulnerable “backdoor” to the enterprise.

To date, security options for mobile devices have been limited. Enforcement of a PIN at power-on and reliance on employee compliance with corporate policies are common efforts to secure mobile devices. However, the mobile device is more than a stand-alone piece of hardware, and security policies must encompass both the device and the network to be effective.

The Solution: Bluefire Mobile Security^TM Suite 3.5

Bluefire Mobile Security^TM Suite enables IT managers to implement the same security policies on mobile devices that they have employed on desktops and laptops. Consistent security policy enforcement is simple; Bluefire’s enhanced user and device registration functions eliminate the administrator’s need to manually collect and link device and owner information

The Bluefire Mobile Security^TM Suite 3.5 is the industry’s only complete wireless data security solution. Bluefire is:

·          Designed for mobile devices. Bluefire’s software occupies a small footprint on the device and has minimal impact on battery life, processor utilization or data channel throughput.

·          Easy to deploy: software can be installed from any networked or remote location. Users can download Bluefire’s software to their device via a web link, email or through 3^rd party device management products such as Extended Systems’ OneBridge™ or iAnywhere’s Afaria.™

·          Compatible with wired and wireless networks. Regardless of location or transmission mode (wired, wi-fi, CDMA, GSM, 3G) configuration commands from Bluefire’s Enterprise Manager console and log updates from mobile devices are transmitted securely, according to preset time intervals.

·          Transparent to users. The Enterprise Manager console can deploy security policies to remote devices and access logs without requiring user intervention. Corporate security administrators have the ability to seamlessly manage device security in real time, regardless of the device’s location and without requiring any interaction with the user.

With Bluefire Mobile Security^TM Suite 3.5 enterprise data is protected on multiple levels:

• Authentication: Enforces power-on PIN or password requirements.

• Encryption: Protects data stored in secure folders on the device or on removable storage cards with AES 128-bit encryption and complies with Federal Information Processing Standards (FIPS) 140-2 policy. A “logout and encrypt” feature can be invoked to automatically encrypt data at power-off.

• Integrity Manager: Monitors core system assets and automatically alerts the user of an integrity violation on the device. The Integrity Manager can be set to actively alert and log an event or to quarantine the device by blocking all incoming and outgoing network communication.

• Intrusion Detection: Scans inbound network packets to identify and prohibit traditional attacks such as LAND.

• Real-time Logging: Captures and retains detailed logs of security events such as successful and invalid login attempts, password resets, quarantine overrides, port scans, firewall security level changes and integrity violations.  Controllable at the administrator level, administrators can determine device usage by choosing to log all network traffic to the device.

• Firewall: Filters traffic to the device in compliance with administrator-controlled port and protocol policies via an integrated LAN/WAN firewall.

• VPN: Secures mobile user connections to the enterprise network.  The IPSec VPN client interoperates with most common VPN concentrators, including models from Cisco and Nortel.

• AntiVirus: Bluefire offers as a bundled solution, a choice of either McAfee VirusScan PDA Enterprise™ or Symantec AntiVirus Corporate Edition PDA Software™, two of the most respected leaders in enterprise virus protection.

The Bluefire Mobile Security^TM Suite 3.5 operates on Palm, PocketPC and Windows Mobile platforms. Bluefire functions uniformly across all platforms allowing consistent enforcement of security policies across all handheld devices throughout an organization.