OpenReach Announces OpenReach Anywhere, First Combination SSL/IPSec Remote Access Solution.

Business/Technology Editors

WOBURN, Mass.--(BUSINESS WIRE)--June 24, 2002

Breakthrough Offering Ends the

Dilemma Between Competing Security Protocols

OpenReach, Inc., the leading provider of virtual private network (VPN) overlay services, today announced OpenReach AnyWhere(TM), the first and only VPN solution to support both IPSec and SSL remote access capabilities. Built on OpenReach's patent-pending Interlock(TM) technology, OpenReach AnyWhere bridges the gap left by competing solutions by offering IPSec and SSL in a single VPN gateway under a unified management architecture. OpenReach AnyWhere is a component of OpenReach's Mobility Plus application suite that instantly connects individuals and entire networks anywhere, anytime regardless of frequently changing IP addresses, connections, and locations. A new white paper, "IPSec vs. SSL: Why Choose?," is now available for download from http://www.openreach.com/ssl.

The Right Tool for the Right Job

IPSec provides highly secure remote access to any IP-enabled application but requires special purpose software for individual PCs. The cost of deploying and maintaining these complex clients has caused many enterprises to limit IPSec access to employees who absolutely need it or to hold off on deployment altogether. SSL provides secure remote access to browser-based applications like e-mail and intranets as well as file sharing but uses standard web browsers rather than requiring additional software, which dramatically reduces deployment and maintenance costs. SSL solutions, however, provide moderate security compared with IPSec and support access to fewer IP applications.

Depending on an enterprise's needs, one or both solutions may be appropriate. For example, a broadly distributed sales force that needs access to e-mail, file shares, and the corporate intranet is well suited to an SSL-based solution that uses strong authentication, eliminating the overhead of additional security software for the PC. On the other hand, HR and finance personnel who need access to custom-built databases or client-server resources require IPSec for its broad application support and advanced security features.

The End of the Dilemma

Until now, enterprises that wanted to take advantage of both IPSec and SSL remote access technologies have had to deploy and operate separate systems from separate vendors. OpenReach AnyWhere ends this dilemma by providing enterprises a fully integrated solution for both IPSec and SSL. IT administrators can provision remote users for IPSec, SSL, or both. OpenReach automatically notifies the user via e-mail and provides instructions for account initialization. If IPSec has been enabled, OpenReach provides the user with a client software download that self installs, generates digital certificates, and automatically registers with the OpenReach Network Operations Center (NOC). If SSL has been enabled, there is no need for additional PC software and the user is provided guidelines for connecting using a browser. At the corporate site a single OpenReach VPN gateway simultaneously supports access from both SSL and IPSec users as well as a rich suite of VPN features, including site-to-site tunneling, routing, firewall, and DHCP client and server.

"We found ourselves caught up in the almost religious debate between IPSec and SSL-based remote access," said Mark Tuomenoksa, chairman and founder, OpenReach. "When we stepped back and took the customer view, we realized that each solution has a place depending on the customer's needs. VPN is about providing secure connections where and when people need them, and shouldn't be limited to specific technologies."

SSL Features

The OpenReach Remote Access service supports the following SSL features:

-- Access to file sharing (browsing, upload, download, folder creation and deletion)

-- Access to e-mail via SMPT, POP, and Microsoft Outlook Web Access (OWA)

-- Access to web-enabled applications

-- Server-side authentication using Entrust or VeriSign digital certificates

-- Client-side authentication using RADIUS, RSA SecurID or local user database

-- Single logon for both SSL and IPSec access

"The remote access VPN market is dividing into SSL-based and IPSec-based solutions, with each offering customer value depending on the application," said Jeff Wilson, Executive Director, Infonetics Research. "OpenReach is the first service provider to offer a completely integrated SSL and IPSec solution, allowing end-users to select which method is correct for their remote access applications."

Pricing and Availability

OpenReach AnyWhere is currently in beta testing and will be available in August 2002. OpenReach customers will automatically receive SSL support through software download to their OpenReach VPN gateways at no additional charge; no manual updates are required. Customers can enable SSL remote access through their OpenReach Interlock Manager. Pricing is based on OpenReach's current IPSec remote access service--there is no additional per-user charge for SSL. A user can be assigned IPSec access, SSL access, or both for one monthly fee. Packages start at $10/user/month with discounts in volume.

About OpenReach, Inc.

With customers in 40 states and 28 countries, OpenReach provides network overlay services that augment or replace existing data networks (frame relay, ATM and leased line) to extend coverage, increase capacity, and reduce operational expense. With ten patents pending in its Interlock Capability Suite, OpenReach's fluid networks shape effortlessly to the needs of changing businesses, unlike carrier services and standalone products that force companies to adapt their business to the constraints of their communication networks. Learn more about OpenReach at http://www.openreach.com.