Penetration Testing mailing list archives

RE: Hardware/software secureIDs - pros and cons.


From: "David M. Zendzian" <dmz () dmzs com>
Date: Fri, 29 Jun 2007 09:43:10 -0400

I think they are great tools. You may want to check out cryptocard. They are much less expensive ($500 gets you 5 
tokens and server license for primary and failover servers), they have lots of hard and soft tokens and hard tokens 
never expire and can have batteries  easily changed. One other nice feature is you can set it to generate a new token 
with every button press vs waiting 30 to 60 sec for new number...which is fun when needing to sign on to many servers 
at once (nothing like taking 6 to 10 min to get on servers during an outage.

Good luck
David


-----Original Message-----
From: eladexposed () gmail com
To: pen-test () securityfocus com
Sent: 6/28/07 9:26 AM
Subject: Hardware/software secureIDs - pros and cons.

Hello, What are the pros and cons for using hardware RSA SecureID/Other and software with the same characteristics?   
For example: http://www.rsa.com/node.aspx?id=1313  Let's say there's a company that allow only customers using the 
hardware SecureID to connect its resources -  What might be the main arguments the company has to prefer the hardware 
and not the software?  From the customer's point of view it's better to have software installed (management, holding of 
multiple tokens, user usage etc)   Kind Regards, Elad Shapira ("Zest")  "Security, however, is an art, not a science." 
- RFC 3631 
------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/wf-spi
------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/wf-spi
------------------------------------------------------------------------


Current thread: