Security - Raritan Dominion KX II Server KX2-432 User Manual

A D: FAQ
PPENDIX S

Security

Q
UESTION
What kind of encryption
does Dominion KX II
use?
Does Dominion KX II
support AES encryption
as recommended by the
US Government's NIST
and FIPs standards?
Does Dominion KX II
allow encryption of
video data? Or does it
only encrypt keyboard
and mouse data?
How does Dominion KX
II integrate with external
authentication servers
such as Active
Directory®, RADIUS,
or LDAP?
How are usernames and
passwords stored?
Does Dominion KX II
support strong
password?
If the Dominion KX II
Encryption Mode is set
to Auto, what level of
encryption is achieved?
Dominion KX II uses industry-standard (and extremely secure) 128-bit
RC4 or AES encryption, both in its SSL communications as well as its
own data stream. Literally no data is transmitted between remote clients
and Dominion KX II that is not completely secured by encryption.
The Dominion KX II utilizes the Advanced Encryption Standard (AES)
encryption for added security.
AES is a US government approved cryptographic algorithm that is
recommended by the National Institute of Standards and Technology
(NIST) in the FIPS Standard 197.
Unlike competing solutions, which only encrypt keyboard and mouse
data, Dominion KX II does not compromise security – it allows
encryption of keyboard, mouse and video data.
Through a very simple configuration, Dominion KX II can be set to
forward all authentication requests to an external server such as LDAP,
Active Directory, or RADIUS. For each authenticated user, Dominion
KX II receives from the authentication server the user group to which
that user belongs. Dominion KX II then determines the user's access
permissions depending on the user group to which he or she belongs.
Should Dominion KX II's internal authentication capabilities be used,
all sensitive information such as usernames and passwords are stored in
an encrypted format. Literally no one, including Raritan technical
support or Product Engineering departments, can retrieve those
usernames and passwords.
Yes. The Dominion KX II has administrator-configurable, strong
password checking to ensure that user-created passwords meet
corporate and/or government standards and are resistant to brute force
hacking.
The encryption level that is auto-negotiated is dependent on the browser
in use:
Browser Encryption Level
Internet Explorer 6 RC4
Internet Explorer 7 AES-128
Firefox 1.5 RC4
Firefox 2.0 RC4
Mozilla 1.7 RC4
Safari 2.0.4 AES-128
A
NSWER
171