HandsFree Networks - Managed Service Infrastructure Provider

HandsFree Networks designed the Integrated Support Automation Platform with comprehensive security throughout. The HandsFree Networks design team brings over 25 years of experience designing secure systems and commercial applications. ReSOFT is ubiquitous on a network, and its main function is to resolve symptoms and execute system management and maintenance procedures, it is well protected from unauthorized use and infiltration.

There are four ReSOFT operations where security measures are in place:

• Remote procedure calls from one ReSOFT client to another
• DART configuration
• DART execution
• Event and activity logging

Secure Communication

The ReSOFT is central to providing maximum security. Remote procedure calls from one ReSOFT client to another are also protected by HTTP authentication and MD5 hashed data transfer. Access to the ReSOFT server, necessary for access to asset information, event and activity logs, and remote site management, is controlled by SSL authorization. All transactions taking place among ReSOFT clients and involving a ReSOFT client and the log server (e.g. DART configuration and event logging) are SSL encrypted.

ReSOFT Agent

The ReSOFT Support Automation Solution is central to providing maximum security. Each computer managed has a small agent installed. The agent initiates all communications back to the server. Since the agent will not accept any inbound connections, it is impossible for a third party application to attack the agent from the network.

Hashed

ReSOFT protects against man in the middle attacks by providing access to the DART configuration controlled via MD5 hashed this means that passwords are never stored anywhere and provides most secure way of accessing. Hashing is a one-way irreversible function while encryption is a two-way reversible function.

Web Access

Administrators access the ReSOFT server through a Web interface after a secure logon process. The Web site itself is protected by HandsFree Networks Automated Patch Management. The patch scan is run on the ReSOFT server every day. Finally, for maximum web security, the ReSOFT server web pages fully support operating as an SSL web site.

Firewalls

Event logging transactions are HTTP based and take place via port 443 the standard secure HTTP port used for browsing. ReSOFT client uses standard TCP/IP ports already open for outbound Internet access in most sites. The use of ReSOFT client does not pose a security risk as it does not need any input ports opened on client machines.