With billions of dollar of annual losses attributed to security breaches, organizations are under increasing pressure from auditors and shareholders to step up their security efforts. A 2007 study from a leading analyst company estimated the average cost per record to be in the range of $90 to $305 depending on the severity of the breach.

FTP and Telnet are two protocols that find their origins back in the late 60’s early 70’s. Both suffer from several security issues but are still widely used by many organizations today because of their flexibility and their pervasiveness. Some of the security issues of FTP and Telnet are:

• Lack of data encryption: all data, including username and password, is transmitted in clear text over the network. Freely available packet sniffers such as Wireshark can easily listen to the communication and capture the user’s credentials.
• No host authentication: FTP or Telnet makes no provision for man-in-the-middle attack during which an attacker sets a fake host in between the user and its original target server to capture and manipulate the data transmission.
• Absence of data integrity mechanisms resulting in the inability to trust the data being transmitted

Connectivity Secure Server offers organizations a secure replacement to Telnet and FTP. Based on the Secure Shell 2 protocol and equipped with the FIPS 140-2 validated Hummingbird Cryptographic Module, Connectivity Secure Server comes with a strong set of security features to protect your data and network:

• Strong authentication: both on the client and on the server side
• Robust encryption: using the industry’s latest cipher suites
• Trusted data integrity: with mechanisms to guarantee your data has not been altered during transit

Connectivity Secure Server comes with many functions and can be used for multiple purposes:

• Secure file transfer
• Secure remote administration
• Secure execution of remote tasks
• Encryption of network traffic
• 3rd party application data-in-transit security

Findings of the Tolly Group Study - Connectivity Secure Server outperforms other secure shell servers from Attachmate Corp and SSH Communications Security

---

Not all Secure Shell server solutions are created equal.

Although there are many secure server solutions in the market that can provide a similar level of security, Connectivity Secure Server is unbeatable when it comes to performances. Designed by creator of the world renowned Exceed product solutions, Connectivity Secure Server is the culmination of over 20 years of network programming experience. It can easily blaze through a file transfer task in less than 5% of the time that the competition needs. In a market which customers are often being forced to choose between security and performance, Connectivity Secure Server offers an uncompromising solution that can satisfy security requirements and improve workflow efficiency and user productivity at the same time.



This insurmountable performance advantage is made possible by the state-of-the-art multi-threaded architecture which is thoroughly and meticulously designed to fully exploit the networking characteristics and capabilities of the underlying operating system. Connectivity Secure Server not only outperforms the competition, it can simultaneously support more user sessions and outlasts many similar solutions in the market thanks to the highly scalable design that leaves very small memory and processor footprints. With faster file transfer, better up-time, as well as support for a higher number of simultaneous user sessions, Connectivity Secure Server enables organizations of any size to achieve compliance objectives without the burden of additional infrastructure or operational costs. It delivers superior return on investment in mission critical environments.

The last few years have seen a number of industry standards and regulations take center stage and deeply influence the way organizations run their business.

Because they lack data encryption, strong authentication and content integrity, protocols such as FTP and Telnet get in the way of achieving compliance with these regulations and should be replaced by a secure alternative such as the one offered by Connectivity Secure Server.

Below is a quick summary of some key regulations and their impact on data-in-transit protection. This list is far from exhaustive and many of these regulations exist in another form in other countries than those described here:

Regulation		Application	Focus	Implication for data-in-transit
PCI DSS	Payment Card Industry – Data Security Standard	International – Any vendor or organization handling payment card data	Securing processing, transmission and storage of payment card data and related information	All payment card data and related information must be safely transmitted when in transit
GLBA	Gramm-Leach-Bliley Act	United States – Financial services companies	Protecting NPPI (Non Public Personal Information) in financial services	Transmission of NPPI must be done securely using encryption and authentication
SOX	Sarbanes-Oxley Act	United States – Publicly traded companies Similar laws in other countries: J-Sox (Japan), Bill 198 (Canada), CLERP9 (Australia), LSF (France), L262/2005 (Italy), DCGK (Germany)	Enhanced corporate accountability through tight controls on financial reporting process including protection of data that participates to the companies’ financial reports	Use strong authentication, access control, data encryption and data integrity mechanisms to fulfill control requirements over sensitive financial information
HIPAA	Health Insurance Portability & Accountability Act	United States - Healthcare industry	Protecting and privacy of patients electronic data and information	Encrypt transmission and authenticate access to patient electronic records
SB1386	California State Bill 1386	United States - California	Mandatory disclosure of breaches involving unencrypted personal information to any resident of the State whose data is believed to have been disclosed	Do not allow any personal information to be transmitted unencrypted
DPA	Data Protection Act	UK - all industries and businesses	Protection of personal information	Securely transmit personal information with proper encryption and access authentication