Symantec Validation and ID Protection Service (VIP)
Out-of-box self-service application–including token activation, token synchronization.

Features & Benefits:

Features

• Cloud-based infrastructure — Secure, reliable, and scalable service delivers authentication without requiring dedicated in-premise server hardware.
• Multiple two-factor credential options — Deploy one-time-password credentials in a variety of hardware, software, or mobile form factors.
• Free mobile device credentials — Support for over 700 Android™, iOS, Windows Phone 7, or J2ME™ devices.
• Out-of-band authentication support — Authenticate users via SMS messages or voice-enabled phone calls.
• Transparent risk-based authentication — Leverage device and behavior profiling to block risky logon attempts without changing the user’s logon experience.
• Self-service credential provisioning — Deploy strong authentication to end users without requiring IT helpdesk or administrator configuration or intervention.
• Enterprise infrastructure support — Integrates with popular enterprise VPNs and corporate directories.
• Web-based application integration — Add strong authentication to your application using the Symantec VIP web services API in your preferred programming language.
• Wide choice of hardware and software one-time password (OTP) credentials, including free mobile phone credentials
• Leverage device and behavior profiling to deliver strong authentication without requiring hardware or software credentials.
• Integrates with enterprise infrastructure via RADIUS out-of-the-box or through plug-ins into popular enterprise applications. Find a complete list of third-party integrations.
• Out-of-box self-service application–including token activation, token synchronization.

Benefits

• Enables compliance: Helps enable compliance by establishing controls over access to sensitive networks, applications, and data
• Reduces capital costs: Eliminates the expense of building and maintaining in-premise infrastructure
• Accelerates time-to-security: Speeds deployments by eliminating infrastructure and physical tokens
• Delivers scalability: Carrier-class availability and reliability accommodates rapid changes in user base

Strong protection

Augment password-based logons with an additional authentication factor to better protect your organization. Symantec VIP helps organizations prevent unauthorized access to sensitive networks and applications, comply with data protection regulations, and enforce security best practices.

Reduced costs and complexity

Deploy strong authentication without the expense of deploying and maintaining dedicated in-premise authentication infrastructure. The Symantec VIP cloud-based approach allows organizations to quickly and easily deploy strong authentication without up-front capital expenditures.

Flexibility to meet diverse needs

Tailor your use of strong authentication to balance the cost, convenience, and security. Symantec VIP’s broad array of authentication options allows an organization to select the right authentication approach to deliver protection for a variety of users and use cases.

Scalable and reliable

Grow your use of strong authentication to large user bases without deploying additional dedicated authentication hardware. The Symantec VIP cloud-based infrastructrue delivers carrier-class scalability and reliability to enable your organization to support millions of users easily and cost-effectively.

Future-proof

Attackers constantly change tactics, and your organization requires authentication solutions that can address these challenges, both now and in the future. The Symantec VIP cloud-based approach enables easy delivery of new capabilities to allow you to stay ahead of emerging threats.

System Requirements:

VIP Access for Mobile

The VIP Access for Mobile application transforms the following popular devices (or devices running these device operating systems) into a one-time-password authentication credential:

• Apple iPhone, iPad, and iPod touch
• Google Android
• RIM BlackBerry
• Windows Mobile

In addition, VIP Access for Mobile supports over 900 popular handsets, including Java and BREW-enabled devices. For a full list please see the VIP Agents and Options webpage.

VIP Access Desktop

• Microsoft Windows XP SP3 (32-bit), Windows 7 SP1 ( 32 bit and 64 bit)
• Mac OSx Lion, Leopard, and SnowLeopard

Supported browsers

• Microsoft Internet Explorer 7.0 or later
• Firefox 3.0 or later

VIP Self-Service Portal

Supported browsers
Microsoft XP, Windows 7 or 8, and Windows Vista:

• Internet Explorer 7 or higher
• Firefox 3.6 or higher
• Chrome 13 or higher
• Mac OS 10.5.8 or higher:
  Safari 5 or higher

VIP Manager

Supported browsers

• Microsoft Internet Explorer 7.0 or later
• Firefox 3.0 or later
• Chrome

VIP Enterprise Gateway

Supported Windows platforms

• Microsoft Windows 2003 Server SP2 (32-bit and 64 bit)
• Microsoft Windows 2008 Server SP2 (64-bit)
• Microsoft Windows 2008 Server R2 SP1 (64-bit)
• Microsoft Windows 2012 Server

Supported Linux platforms

• Red Hat Linux EL 5.6 and 5.8 (32-bit and 64-bit)
• Red Hat Linux EL 6.1, 6.2, and 6.3 (64-bit)
• GNU C Library (glibc) 2.4 or higher

Supported LDAP directories

• Windows Active Directory 2003
• Windows Active Directory 2008
• Windows Active Directory 2008 R2
• Novell eDirectory 8.8 SP2 or later
• CA eTrust r8.1 or later
• SunOne Directory Server 6.1 or later
• OpenLDAP 2.4.8 or later

Supported browsers

• Microsoft Internet Explorer 8.0, 9.0, and 10.0
• Mozilla Firefox 21 and 22

VIP Enterprise Gateway integrates with a wide array of enterprise applications from popular vendors, including:

• IPSec and SSL VPNs: Cisco, Juniper, F5, Microsoft UAG, Citrix AG
• Outlook Web Access
• Web Access Managers and Single Sign-On solution: Tivoli AM, Oracle AM, PingIdentity PingFederate, CA SiteMinder
• Service login integration: Unix PAM, Windows GINA
• Other RADIUS-enabled applications

VIP Intelligent Authentication

Supported browsers

Microsoft XP, Windows 7 or 8, and Windows Vista:

• Internet Explorer 7 or higher
• Firefox 3.6 or higher
• Chrome 13 or higher

Mac OS 10.5.8 or higher:

• Safari 5 or higher

Mobile:

• Android™ 2.3 and 3.0 for Samsung mobile devices and tablets
• iOS for iPhone 4 and iPad 2

VIP Registered Computer (RC)

Supported browsers

Microsoft XP, Windows 7 or 8, and Windows Vista:

• Internet Explorer 7 or higher
• Firefox 3.6 or higher
• Chrome 13 or higher

Mac OS 10.5.8 or higher:

• Safari 5 or higher

Agents:

VIP Access For Mobile

VIP Access for Mobile transforms popular smartphones, such as the iPhone, into a free one-time password credential for use with the Symantec Validation and ID Protection Service.

For Businesses:

• Increases security
• Cost-effective
• Easy to deploy
• Readily adoptable
• Standards-based

For Consumers:

• Greater protection
• Convenient
• Easy to use
• Valid at any VIP member site

VIP Network

Consumers can use their VIP credential at any member web site that displays the Symantec VIP logo.

Become a VIP Network Member to:

• Reduce fraud and support compliance for PCI, Sarbanes-Oxley, FFIEC, OMB/NIST Level 3, HIPAA, and FACTA Red Flags.
• Differentiate your business at a time when loyalty is low and switching providers is easy.
• Win customers over with the convenience and security of online transactions.
• Eliminate the cost and effort of managing tokens or smart cards.
• Complement other forms of credentials you may offer.

Options:

Intel IPT

The Intel Identity Protection Technology (IPT) delivers a hardware-embedded strong authentication credential for VIP to protect enterprise and consumer access to online services without the need for additional hardware or software.

For Businesses

• Increases security
• Cost-effective
• Easy to deploy
• Readily adoptable
• Standards-based

For Consumers

• Greater protection
• Convenient
• Easy-to-use, hard-to-lose

Third-party Integrations

Symantec VIP supports integration with many popular enterprise applications. The following is a list of our current integrations:

Apache Networks

• Apache HTTP Server

Array Networks

• Array SSL VPN

Barracuda Networks

• Barracuda SSL VPN

Computer Assoicates

• Siteminder

Check Point

• SSL VPN Software Blade
• Firewall Software Blade
• IPSec VPN Software Blade

Cirix System

• Citrix Access Gateway
• Citrix GoToMyPC
• Citrix Netscaler
• Citrix XenApp

Cisco Systems

• Cisco Secure ACS
• Cisco Adaptive Security Appliances
• Cisco VPN

F5 Networks

• Firepass VPN

IBM Corporation

• IBM Tivoli Access Manager

Juniper Networks

• Juniper SA VPN
• Juniper Steel Belted Radius

Microsoft Corp.

• Active Directory Federation Services
• Microsoft Credential Provider
• Threat Management Gateway (2010)
• Internet Acceleration Server (2006)
• Microsoft Forefront Unified Access Gateway
• Microsoft GINA
• Internet Information Services (IIS)
• Outlook Web Access
• Remote Desktop Web Access
• SharePoint Portal Server

Oracle Corporation

• OpenSSO
• Oracle Access Manager

Oracle Corporation and Red Hat

• Pluggable Authentication Modules

SAP

• Netweaver

SonicWALL

• SonicWALL Aventail SSL VPN

VMWare

• VMWare View 5.1

Documentation:

Download the Symantec Validation and ID Protection Service (VIP) Datasheet (PDF).