Celestix' HOTPin[TM] Cuts the Cost of Two-Factor Authentication by Turning Mobile Phones Into Hardware Tokens.

2FA/SSL VPN Solution Is Fully Integrated "On-Box" for Fast, Easy Deployments

FREMONT, Calif. -- Celestix Networks, manufacturer of the world's best-selling security appliances for Microsoft ISA Server 2006 and IAG 2007 security software, has announced the release of their new HOTPin[TM] Two-Factor Authentication (2FA) system that employs mobile phones and Windows devices as high-security hardware tokens. HOTPin is Celestix' economical alternative to 2FA systems that use expensive single-function hardware tokens and have high per-user licensing fees.

Celestix' HOTPin system supplies One Time Passwords (OTPs) to mobile phones and Windows devices through two modes. HOTPin's client mode uses client software that resides in smart phones to generate OTPs within the smart phones. In clientless mode, HOTPin software residing in a WSA appliance sends OTPs as text messages to SMS text-compatible mobile phones. HOTPin can operate in either mode or both modes simultaneously. Client mode has the advantage of delivering OTPs regardless of wireless RF reception. Clientless operation is advantageous for users who do not have smart phones that can support the HOTPin client software.

When a user wants to log onto their network from a laptop or desktop computer or other device, they enter their password or PIN and the OTP they receive from their mobile phone. If a criminal should intercept a user's password and OTP, that OTP is useless when the criminal tries to access the network.

Celestix' HOTPin system needs no other hardware tokens. HOTPin leverages ubiquitous smart phones as clients, which makes them readily available and inexpensive to use as tokens. HOTPin uses the industry standard HOTP algorithm (IETF RFC4226) to generate OTPs. HOTP is an open standard that has been extensively peer reviewed for security.

Celestix offers the HOTPin system as an option on their WSA series appliances. WSA series appliances are platforms for Microsoft IAG 2007 software for SSL VPNs. As an on-box appliance integration, HOTPin is very fast and easy to put into operation. The combination of a 2FA system and an SSL VPN provides highly secure remote access.

"Without rigorous authentication, you don't have security. By using mobile phones as tokens and with economical licensing, HOTPin brings down the cost of two-factor authentication. I predict that HOTPin will open new business sectors to the rigorous security of two-factor authentication," stated Celestix president Yong Thye Lin.

John Chirapurath, director in the identity and security business group at Microsoft commented, "HOTPin two-factor authentication technology is highly complementary to IAG 2007 for providing remote workers, partners, and customers with flexible and secure access to virtually any application, from a broad range of devices and locations.

The first release of HOTPin supports Windows Mobile devices, RIM Blackberrys, Apple iPhones, and SMS/email. Celestix plans to broaden HOTPin clients supported to include Google Android smart phones in the second quarter of 2009.

For more information about HOTPin contact [e-mail] or visit www.celestix.com.

About Celestix

Celestix delivers thousands of security appliances to mid-market organizations and enterprises annually. Founded in 1999, Celestix Networks has offices in Fremont, California; Singapore; Reading, UK and Chennai, India. Celestix has significant presences throughout the United States Europe and Asia, including Japan, to supplement its channel business. To date, Celestix has enlisted over 450 channel partners worldwide to help serve its end customers. For more information, call: [phone] or visit Celestix on the Web at www.celestix.com.