Virtual Identity Server - LDAP Proxy Firewall

Securing and Protecting Active Directory

Features

Below are just some of the features of the Virtual Identity Server

Application Specific Views

In many cases, applications that are written to Active Directory are written poorly and inefficiently. For example, many applications connect at the root of the Active Directory forest when they may only need to search one or two containers in the tree. Additionally, many applications only need to view users and groups, but in reality are granted access to view more than just users and groups.

This is because Active Directory does not provide the ability to control what is searched, such as specific LDAP queries. VIS, however, easily publishes application specific views, granting only the data the application requires. The result is a more secure Active Directory and increased performance for both the application and Active Directory.

^ back to top

Powerful Join and Merge Options - Without Custom Code

The Virtual Identity Server provides powerful joining and merging options, allowing you to easily present multiple views or a single enterprise view of data existing across multiple siloed directories in real-time. VIS provides sophisticated data transformation and virtualization with the ease of a point and click configuration.

Join & Merge Options of the Virtual Identity Server include:

• Union Mode- Provides a combination or collection of the objects from all connected source directories.
• Object Precedence Mode (OP)- Provides an authoritative order at a directory level. For users that exist and are joined in x number of directories always return “this” user object.
• Attribute Precedence (AP) Mode– Provides a merged view of objects (Givenname, SN from Internal directory and sAMAccountName and HealthID from External directory.

The Virtual Identity Server can:

• Provide a single enterprise view of data across multiple siloed directories
• Provide a different view of the data on an application by application basis
• Allow different rights/access to data (i.e. update or read only) on an application by application basis
• Transform, merge and map data from multiple LDAP directories to a virtual name or namespace

^ back to top

Comprehensive Audit and Compliance

The Virtual Identity Server can help your organization meet audit and compliance initiatives such as those required by Sarbanes Oxley (SOX), Basel II, European Union Privacy Directive, Capital Accord HIPAA and Gramm-Leach-Bliley Act.

VIS has complete and comprehensive audit logging of all activity. All LDAP operations are logged and stored to a Microsoft SQL Server database for easy reporting and retrieval.

Using the built-in web reporting , you can easily report on who logged in and when, and what changes they made. Reports can even be auto-scheduled for email distribution in a wide variety of formats (PDF, XLS, HTML).

The Virtual Identity Server can help you answer questions such as:

• Who has logged in and when?
• What changes were made to data and when?
• Who was added to the Administrators group today?
• What changes did "Bob" make?

^ back to top

Robust Scaling and Caching

The Virtual Identity Server scales horizontally or vertically to meet the needs of enterprise deployments. VIS has built-in connection pooling, and full support for failover and load balancers.

• VIS can be placed behind a load balancer (hardware or software) to provide robust failover/redundancy for applications connecting to VIS.
• VIS scales either horizontally or vertically to meet the demanding needs of enterprise deployments.
• VIS offers robust caching options, allowing you to cache objects on a connection by connection basis or even objectclass basis. Objects can have a cache size limit and a time limit or both.

^ back to top

Extensible Solution

The Virtual Identity Server is an extenisible solution, allowing an organization to customize the software to meet specific needs.

• The Virtual Identity Server can be extended using any standard .NET programming language such as VB.NET or C#
• Custom adapters can easily written leveraging the base VIS .NET objects that are visible within Visual Studio.

^ back to top

Enhanced Microsoft Centric Platform

The Virtual Identity Server increases the value of your existing Microsoft environment.

• VIS leverages the existing investment in Microsoft technology, extending it with increased functionality.
• VIS is developed in .NET technology and is designed to seamless integrate with your Microsoft environment.
• VIS is a platform that continues to grow with an organization's needs.
• VIS has proven solutions for Microsoft applications such as SharePoint and MIIS/ILM

^ back to top

      
   VIS LDAP Proxy Firewall Datasheet (pdf)