Intoto Upgrades IPsec VPNs with IKEv2 Support for Secure Enterprise Networking and Mobility Applications.

SAN FRANCISCO -- iGateway EX Product Line Implements the New Version of IKE for Improved Performance, Security, Reliability, and Remote Access Capabilities

Intoto, a leading provider of integrated security, wireless and voice software platforms to networking Original Equipment Manufacturers (OEMs), today announced the availability of IKEv2 functionality in its iGateway EX integrated software platforms for enterprise networking and mobility applications. The iGateway EX product family implements IKEv2, the latest authentication protocol for IPsec VPNs, to provide improved performance, security, reliability, and remote access capabilities.

"IKEv2 is quickly becoming a necessary ingredient in any enterprise-class security appliance," stated Jeff Wilson, principal analyst for VPNs and security at Infonetics Research, a San Jose-based networking market research firm. "Its simplified IKE message exchanges results in a reduced number of messages for common IPsec deployments, making it a more reliable protocol than its predecessor. OEMs looking to either integrate VPN functionality into an existing platform or create an entirely new device need to select software that provides this functionality."

Internet Key Exchange (IKE), a component of IPsec, is used for performing mutual authentication and establishing and maintaining Security Associations (SAs). The new IKEv2 specification merges multiple dependent specifications and requirements that have evolved over time since the original IKEv1 specification. These include legacy authentication, remote configuration and NAT traversal. By removing unnecessary requirements, the IKEv2 core framework is significantly simplified and produces better performance, security, and reliability through improved response time and throughput. The new protocol also improves interoperability with other security devices that incorporate IPsec VPNs.

"Intoto has always been a foundation member of ICSA Labs' IPsec VPN Certification program which stresses secure interoperability," said Mark Zimmerman, technology programs manager at ISCA Labs. "This can be further demonstrated by their participation in the upcoming ICSA Labs IKEv2 Interoperability Workshop being held in Santa Clara, CA beginning February 22nd 2005. At this event, 10 new VPN products that have never seen the light of day based on new IKEv2 technology will be set up and tested against each other for the first time."

IKEv2 is the Internet Engineering Task Force's (IETF) attempt to simplify and consolidate IPsec VPN technology, as it has long been criticized as being too complex and confusing. "Lessons were learned from the mistakes made when IKEv1 was developed and the resulting lack of product interoperability," says Zimmerman. "They have now consolidated functional standards which will cut way down on a VPN product development team's confusion and/or misinterpretation."

With IKEv2 functionality, the Intoto iGateway EX product family is ideal for IPv4, IPv6 and mobile applications. Its mobility capabilities enable standardized GSM SIM authentication through EAP, allowing it to be more scalable than IKEv1. It also provides standardized support for client configuration, such as configuring IP addresses, DNS addresses and netmasks. Additionally, the IKEv1 applications are upgradeable to IKEv2.

"Our integration of IKEv2 functionality into the iGateway platform demonstrates once again Intoto's commitment to staying on the leading edge of security technology," said Doug Makishima, vice president of marketing at Intoto. "Our OEM customers, which represent some of the biggest names in networking, demand that we keep our iGateway platforms at the forefront of the industry so they can compete effectively without having to draw on their own development resources."

In addition to supporting the IKEv2 standard, Intoto's iGateway EX product line includes advanced features such as Certificate Authentication with certification chaining and cross certification support, Liveness Check for detection of dead peers, Extended Sequence Number (ESN) needed in ultra-high volume data networks, and NAT-Traversal for working through enterprise networks with Network Address Translation (NAT). Furthermore, iGateway EX with IKEv2 supports Extensible Authentication Protocol (EAP) with EAP-SIM support and IPsec Remote Access Client and Server (IRAC/IRAS) for private IP configuration management.

Pricing and Availability

The iGateway EX SecureEnterprise, iGateway EX SecureSME, and iGateway EX SecureEnterprise with IKEv2 functionality is now available. The stand-alone iGateway VPN module with IKEv2 is also available now. Pricing available upon request.

About Intoto

Intoto is the leading software Original Design Manufacturer (ODM) of integrated security, wireless and voice software platforms for networking and communications equipment. Intoto has more than 100 designs with high-volume global Original Equipment Manufacturers (OEMs) serving the residential, small business, and enterprise markets. Intoto's complete, integrated software platform solutions, which support all major hardware platforms and operating systems, enable OEMs to reduce development costs and speed time-to-market for faster return on investment and increased market share. Intoto boasts in excess of 1 million installations of its technology in U.S., European and Asia-Pacific markets. Founded in 1998, Intoto is headquartered in Santa Clara, Calif. More information is available at http://www.intoto.com or by calling [phone].

(C)2004 IntruPro, ParentalCQ, and Accelerate Innovation are trademarks or registered trademarks of Intoto, Inc. in the United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice. All rights reserved.