ZyXEL ZyWALL OTPv2 System
One-Time Password System

Overview:

The ZyXEL One-Time Password (OTP) Solutions adopt two-factor authentication to strengthen the identification check and to prevent unauthorized access or theft to confidential data. ZyXEL’s OTP Solutions include both physical and software generators: the ZyWALL OTPv2 and OTPv2 mobile token (OTP-MOBI). The ZyWALL OTPv2 is a compact, portable OTP authenticator, while the OTPv2 mobile token (OTP-MOBI) is a software application running on mobile devices to be used in combination of a password to empower employees, customers and partners to securely access data anytime, anywhere.

The ZyWALL OTPv2 and OTPv2 mobile token (OTP-MOBI), along with the SafeWord 2008 management application, can be easily integrated with the entire range of ZyWALL USG security products to extend the safety protection of authentication to any site. The SafeWord 2008 is a network security application residing on the central network, while the ZyXEL OTP Solutions are operated on client devices. Together, they provide a highly robust and universal mechanism to protect network resources in the authentication processes of LAN, Web and Outlook Web App (OWA) applications.

• Two-factor authentication including physical portal token and newly introduced mobile token
• Full supported by the entire ZyWALL USG product range
• Highly secure and straightforward implementation
• Easy installation and management

Models:

	ZyWALL OTPv2 One-Time Password System
	ZyWALL OTPv2 Mobile Token (OTP-MOBI) One-Time Password Software Generator

Strengthened Authentication Protection with ZyWALL OTP Solutions

Seamless authentication protection for remote access

The starting point of security is to ensure that only authorized people can remotely access the protected network applications and resources. However, given enough time for attempts, it’s relatively easy for unauthorized intruders to crack a static password. With one-time password authentication, the risk can be significantly reduced by constant alternation of the combinations.

Turn mobile devices into powerful authenticators (OTP-MOBI)

In today’s evolving business environments, employees would use smart phones, tablets and other mobile devices to access network applications. In the mobile trend, businesses must face the challenge keeping track of the increasing range of end-point devices and managing controls of mobile users who access corporate resources such as Web portals, cloud applications and sensitive resources. The ZyWALL OTPv2 mobile token (OTP-MOBI), a new OTP solution, is ZyXEL’s answer to the trend. Powered by SafeNet, the OTPv2 mobile token (OTP-MOBI) is a software-based two-factor authenticator combining secured access checks with the convenience of one-time passwords generated on mobile devices. With one-click installation of the smart phone app, the mobile assets can be effectively protected by the authenticating mechanism.

Leveraging the entire USG platform

With the field-deployed ZyWALL USGs, administrators can extend the authentication management on premise or on remote sites by quickly installing SafeWord 2008 in the server area. The seamless integration of SafeWord 2008 and Microsoft infrastructure makes it simple to deploy two-factor authentication for VPNs, while the strengthened remote access protection can cover various applications such as IPSec, SSL VPN connection and administrator login on USG devices.

Standard-compliant solution with effortless integration

The ZyXEL OTP Solutions and SafeWord 2008 are compatible with popular remote access servers including Active Directory and RADIUS. These are field-proven solution that can be migrated to the existing corporate environment without major network adjustments; and the ZyXEL OTP Solutions also comply with industrial OATH standards to eliminate the security and interoperability concerns of users.

Specifications:

ZyWALL OTPv2

• Chip-based Authentication Token
  • Power: Internal battery
  • Driverless
• OTP Number Generation
  • OATH-compliant (Based on HMAC-SHA1)

OTPv2 mobile token (OTP-MOBI)

• Supported Devices
  • iPhone, BlackBerry, Android-based smartphones, Windows smartphones

Physical Specifications

ZyWALL OTPv2

• Power: Internal battery
• Casing: Polycarbonate
• Dimensions (WxDxH): 58 x 12 x 26 mm (2.28" x 0.47" x 1.02")
• Weight: 13 g (0.03 lb.)

Environmental Specifications

ZyWALL OTPv2

• Operation Environments:
  • Temperature: 0°C to 70°C (32°F to 158°F)
  • Humidity: 0% to 100% (Non-condensing)
• Storage Environments:
  • Temperature: -40°C to 85°C (-40°F to 185°F)
  • Humidity: 0% to 100% (Non-condensing)

ZyXEL Appliances Supported

• All ZyWALL USG products

SafeWord 2008 Software

• Protects your valuable information assets and applications
• Positively identifies remote VPN
• Designed for Windows environments to offer seamless Microsoft AD integration
• Delivers an easy, fast installation experience: runs on existing servers
• Enabled Security Service & Solutions:
  • Secure SSLVPN logon
  • Secure IPSec VPN (with XAuth) logon
  • Web access with RADIUS
  • Dial-up with RADIUS

SafeWord 2008 Server Requirements*

• Hardware:
  • CPU: Single processor with 1.4 GHz (x64 processor) or 1.3 GHz (Dual Core)
  • RAM: 1 GB or higher
  • Disk Space: 3 to 5 GB or greater
  • Display: Super VGA (800 × 600) or higher resolution monitor
  • Other: DVD drive, keyboard and Microsoft mouse (or compatible pointing device), Internet access (fees may apply)
• Software:
  • Operation System: 32 or 64-bit Windows Server 2003/2008 or Windows Server 2008 R2

*Note:

• Actual requirements may vary based on your system configuration as well as the applications and features you chose to install.
• Processor performance depends not only on the clock frequency, but also the number of cores and size of the on-chip cache.
• Disk space requirements for the system partition are approximate. Additional available hard disk space may be required if you are installing over a network.

Application Diagram:

Documentation:

Download the ZyXEL ZyWALL OTPv2 Data Sheet (PDF).