Messaging and Directory Server software used around the world in the Government, Military, Aviation and Commercial sectors.
There are a number of server security, server monitoring and server redundancy features common to Isode's Directory, Internet Messaging, X.400 Messaging and Instant Messaging server products. On this page you'll find information on Isode support for:
- Simple Network Monitoring Protocol (SNMP)
- X.509 Strong Authentication
- Simple Authentication and Security Layer (SASL)
- Transport Layer Security (TLS)
- Audit Logging & Event Handling
- Failover Clustering
- Off-Site Hot Standby
Simple
Network Monitoring Protocol (SNMP)
While Isode's GUI console tools are ideal for monitoring smaller configurations of Isode servers, larger deployments will often use SNMP (Simple Network Monitoring Protocol) to monitor a wide range of network and other components.
SNMP is supported by many network components and applications as well as a wide range of management consoles and can be used for monitoring all of Isode's server products.
X.509 Strong Authentication
X.509 describes an approach to providing and managing authentication using asymmetric cryptography, generally referred to as Public Key Infrastructure (PKI). X.400 and X.500 defined authentication mechanisms using X.509 PKI, which these standards referred to as "strong authentication". Isode uses the term Strong Authentication to mean authentication based on X.509 PKI. Isode supports Strong Authentication in the following protocols:
- X.400 P1
- X.500 DAP, DSP and DISP
- LDAP
- SMTP
- SOM
- IMAP
- POP3
- XMPP protocols
Isode's Strong Authentication Infrastructure (more)
HF Radio & Satellite
Isode plans to provide support for all of its servers to operate over HF Radio and Satellite. Support is currently provided for:
- X.400 (STANAG 4406) messaging, using STANAG 4406 Annex E and ACP 142 (M-Switch X.400).
- Internet Mail using BSMTP over ACP 142 (M-Switch SMTP)
- Directory Replication over Email (Sodium Sync)
Further Information is given in the following white papers:
- STANAG 5066: The Standard for Data Applications over HF Radio describes Isode’s approach to supporting HF Radio.
- Military Messaging over HF Radio and Satellite using STANAG 4406 Annex E describes STANAG 4406 (X.400) over HF & Satellite.
- Messaging Protocols for HF Radio describes Internet Messaging and STANAG 4406 over HF Radio.
- Directory Replication by Email and over 'Air Gap' describes directory replication over Email.
Security Labels, Security Clearances, and Security Policy
Isode provides a common infrastructure for Security Labels, Security Clearances, and Security Policy. This is currently used in M-Vault, but it is planned to be added to other products. Further information is available in the following white papers:
- Isode Security Policy, Security Label and Security Clearance Infrastructure
- Using Security Labels for Directory Access Control and Replication Control describes use in M-Vault.
- Access Control using Security Labels & Security Clearance gives a general introduction to Security Labels and Clearances.
- Managing and securely determining Security Clearance describes use of Security Clearance by applications.
Simple Authentication and Security Layer (SASL)
SASL is an Internet Standard method for adding authentication support to connection-based protocols. Isode uses SASL in the following protocols and products:
- LDAP (in M-Vault)
- SMTP (in M-Switch)
- SOM Isode Protocol (in M-Switch)
- IMAP (in M-Box)
- POP3 (in M-Box)
- XMPP protocols (in M-Link)
Transport Layer Security (TLS)
TLS is an Internet Standard for providing data confidentiality and also provides strong authentication using X.509. Isode uses TLS in the following protocols and products:
- LDAP (in M-Vault)
- SMTP (in M-Switch)
- LMTP (in M-Switch & M-Box)
- SOM - Isode Protocol (in M-Switch)
- IMAP (in M-Box)
- POP3 (in M-Box)
- XMPP protocols (in M-Link)
Audit Logging & Event Handling
Isode server products provide audit logging so that key actions can be recorded for audit purposes. Audit log entries are written in an easily parseable, extensible format that can be easily analyzed. Configuration GUIs for each product allow you to choose which audit events you wish to log, which data keys to log, and to configure multiple audit logging streams, so if you need multiple audit logs with different (potentially overlapping) information that can be achieved.
Audit Logging & Event Handling (more)
Failover Clustering
In a failover cluster the primary system provides service in normal situations. A second (failover) system is present in order to run the service when the primary system fails. Failover clustering is supported in the following Isode products:
- M-Vault
- M-Switch
- M-Store X.400
M-Box has a horizontally scaled architecture that allows failover using an active/active approach.
Isode's Failover Clustering Support (more)
Off-Site Hot Standby
There are some disaster situations from which an organisation cannot recover using only local redundancy systems. The 'off-site hot standby' approach provides an off-site system that will take over from the primary system without any service interruption in the event of a total failure at the primary site. Off-Site Hot Standby is supported in the following Isode products:
- M-Vault
- M-Switch
- M-Store X.400
Isode's Off-Site Hot Standby Support (more)
