|
|
| |
|
|
|
| |
1.
How
is XyLoc different than other traditional
security methods such as smart cards, biometrics,
etc.? |
|
|
|
|
|
|
|
|
| |
In
addition to performing identification and
authentication functions like traditional
security methods, XyLoc's intelligence constantly
monitors for the presence or absence of
authorized users. XyLoc's full-time access
control technology addresses the major vulnerability
inherent in all existing security methods
- they are gatekeepers that protect the
information only at the point of entry:
the initial logon process. Other security
solutions are not "smart" enough to recognize
that users are not in control of their computers
at all times after logon. After users have
entered their password, inserted their token
or placed their finger on the reader and
they have been identified and authenticated,
the gate is wide open and information assets
are up for grabs the minute the user walks
away from the PC.
Top
|
|
|
|
|
|
| |
|
|
|
| |
2.
Is
XyLoc compatible with my existing security
methods? |
|
|
|
|
|
|
|
|
| |
Yes.
XyLoc can either be used to initiate a company's
security policy, or enhance and build upon
an existing security environment. XyLoc
actually improves existing security measures
by adding another layer of protection from
damage, data theft or unauthorized access.
The XyLoc software sits on top of the operating
system, and even closes security holes in
Windows 95/98 and Windows 2000 environments
in addition to providing superior access
control.
Top
|
|
|
|
|
|
| |
|
|
|
| |
3.
Does
XyLoc eliminate the need for traditional passwords? |
|
|
|
|
|
|
|
|
| |
This
depends on the organization. XyLoc adds
a layer of security above and beyond the
use of passwords. Passwords verify users
only initially, leaving a network thereafter
open for security breeches and attacks.
XyLoc uniquely addresses the window of vulnerability
that opens after the point of logon, such
as when a user leaves the computer and data
remains unprotected to unauthorized view
or access. However, XyLoc does offer dual-factor
authentication utilizing a password in addition
to the XyLoc Key.
Top
|
|
|
|
|
|
| |
|
|
|
| |
4.
Does
XyLoc incorporate encryption? |
|
|
|
|
|
|
|
|
| |
Yes.
The continuous communication between XyLoc's
Lock and Key is encrypted to protect the
communication link between the two devices.
In addition, XyLoc encrypts key files stored
on the hard drive that relate to XyLoc's
operating characteristics, preventing anyone
from circumventing or overriding the XyLoc
system.
XyLoc
Enterprise, XyLoc Enterprise and XyLoc
MD also feature XyCrypt File Encryption.
XyCrypt prevents
unauthorized access to data files on the
hard drive of a Xyloc protected laptop or
desktop PC, even if other security measures
have been surmounted. Once configured, the
user may encrypt or decrypt a file with a
simple select and click procedure, creating
an additional and powerful level of
information security. Multiple users of the
PC can encrypt their own files. The file
protection is specific to each user's Key ID
and a Secret Code specified by the user the
first time they encrypt a file on that
system. Even if a laptop is stolen and the
hard drive is removed, the information
within the encrypted file remains completely
protected.
Top
|
|
|
|
|
|
| |
|
|
|
| |
5. Can
one XyLoc-equipped computer support multiple
Keys? |
|
|
|
|
|
|
|
|
| |
Depending
on configuration, a single XyLoc Key can
unlock one or multiple computers. For example,
a system administrator's Key can be authorized
to operate every XyLoc system in the company
or the system administrator can authorize
a manager's Key to work on every computer
in a specific department.
Top
|
|
|
|
|
|
| |
|
|
|
| |
6. What
if I lose or forget my XyLoc Key? |
|
|
|
|
|
|
|
|
| |
In
the event of Key loss, XyLoc is equipped
with an override password that is chosen
during the initial installation. This override
password can be set to operate for a specific
number of entries or time period. Alternatively,
an administrator can issue a temporary Key
or deactivate the old Key and issue a new
Key.
Top
|
|
|
|
|
|
| |
|
|
|
| |
7. What
if my key is stolen? |
|
|
|
|
|
|
|
|
| |
Most
organizations will choose to administer
XyLoc so that users are required to enter
a password as well as possess their XyLoc
in order to logon when returning after a
set period of time. If someone else possesses
your XyLoc Key, it is useless without also
knowing your password. If your Key is stolen,
you can access your computer using a special
override password if one has been administered.
If not, your help desk will be able to issue
you a new XyLoc Key and disable the stolen
Key.
Top
|
|
|
|
|
|
| |
|
|
|
|
|
| |
Yes.
Although XyLoc utilizes radio frequencies,
the transmitter puts out a weaker signal
than many common household devices. In fact,
XyLoc's signal is less than one quarter
of the leakage permitted in a personal computer
as a by-product of its normal operation.
Top
|
|
|
|
|
|
| |
|
|
|
| |
9. What
is the battery life of a XyLoc Key? |
|
|
|
|
|
|
|
|
| |
Batteries
typically last between one and two years,
depending on the type of use.
Top
|
|
|
|
|
|
| |
|
|
|
| |
10. How
is XyLoc installed? |
|
|
|
|
|
|
|
|
| |
Installing
a XyLoc system is very easy. The Lock is
simply plugged into either a serial or USB
port. The XyLoc client software can be loaded
from a CD, downloaded from the XyLoc Security
Server, or can be included in your image
for mass distribution to all the PCs on
your network. XyLoc is compatible with
portable or desktop
PCs running Windows 98, Windows
NT 4.0 with SP 4, Windows XP
or XP embedded thin client.
Top
|
|
|
|
|
|
| |
|
|
|
| |
11. Can
XyLoc be bypassed? |
|
|
|
|
|
|
|
|
| |
It
would very difficult, if not impossible,
to defeat XyLoc. Booting in Safe Mode, unplugging
the Lock, or even removing the hard drive
cannot defeat XyLoc. Of course, administrators
can define applicable overrides for emergency
access.
Top
|
|
|
|
|
|
| |
|
|
|
| |
12. What
radio frequencies does XyLoc work with? |
|
|
|
|
|
|
|
|
| |
XyLoc's
standard Lock and Key technology is based
on 300, 800 or 900 MHz radio signals, depending
on the country of installation.
Top
|
|
|
|
|
|
| |
|
|
|
| |
13. How
does XyLoc help my organization in the case
of an audit? |
|
|
|
|
|
|
|
|
| |
Every
XyLoc product keeps a detailed event log
and audit trail, so you can profile the
system's use in the case of an audit. Every
time a user logs on to the network - whether
they gain entry with their XyLoc Key or
with an override password - XyLoc records
the action. Every time a user steps away
and activates XyLoc's automatic locking
mechanism, the software records the event.
However many users are accessing however
many different computers, XyLoc keeps a
record of who accessed which machine and
at what time, as well as many other details
about the system.
Top
|
|
|
|
|
|
| |
|
|
|
| |
14. How
does XyLoc help my organization reach HIPAA
compliance? |
|
|
|
|
|
|
|
|
| |
The
proposed HIPAA regulations will require
healthcare organizations to implement administrative,
physical and technical procedures and safeguards
to guard the integrity, confidentiality
and availability of patient data. Access
control policies and procedures will play
a large part in HIPAA compliance. XyLoc
MD's proximity-based access control helps
organizations prepare for the forthcoming
final HIPAA regulations without forcing
healthcare works to engage in lengthy logon/logoff
procedures necessary to ensure network and
patient data security.
The
proposed regulations call for organizations
to implement physical access controls, guidelines
for workstation use and physical security
of workstations to prevent unauthorized
access of information. The guidelines currently
call for information access control and
auditing capabilities. XyLoc MD was designed
with these requirements in mind, and provides
the heart of a complete security solution
that meets all of the HIPAA requirements.
Top
|
|
|
|
|
|
| |
|
|
|
| |
15. How
does XyLoc help my organization's users comply
with information security protocols? |
|
|
|
|
|
|
|
|
| |
XyLoc
makes security convenient for users, so
they are happy to comply. XyLoc is flexible
enough to make the system as convenient
for users as you want. XyLoc can prompt
users to select their username and require
a password, or allow them to be automatically
logged as they approach a computer.
Furthermore,
XyLoc can determine when a security protocol
is not being followed. For instance, XyLoc
can determine when a Key is dormant, and
therefore not being worn by the user. It
can be configured so that if a user removes
his Key for a few minutes, XyLoc locks access
to his machine. Features like this ensure
that users comply with security protocols
with very little effort on their part.
Top
|
|
|
|
|
|