Technical Specifications

Reflection for Secure IT is a family of Secure Shell clients and servers for Windows and UNIX—all designed to protect data in motion. By replacing nonsecure Telnet and FTP with Reflection for Secure IT, administrators can safely transfer sensitive data, manage remote servers, and access corporate applications over encrypted connections.

VERSION 7.0 HIGHLIGHTS

• Version 7.0 provides more options for encryption, authentication, and automation with the Reflection FTP client utility, which supports:
• The SFTP protocol, standard FTP (unencrypted), FTP over SSL/TLS, and Kerberized FTP (TLS).
• Public Key Infrastructure (PKI).
• File transfer automation via OLE interface.
• Easier configuration of secure shell tunneling for FTP sessions.

Secure File Transfer

• SCP1 (for compatability with OpenSSH servers)
• SCP
• SFTP
• SFTP file transfer resume after interrupted downloads
• Reflection FTP Client:
• Secure file transfers (SFTP)
• SSL/TLS/Secure Shell and Kerberos encryption
• File browsing on IBM mainframes with no host-side intrusion or modification
• IPv6, SOCKS, and NAT support
• Support for wide variety of FTP servers:
• IBM System z, IBM System i, UNIX, NetWare, Unisys, HP 3000, and OpenVMS
• Site-to-site transfer between servers
• FTP site wizard
• Export/import settings in XML format
• Automation tools (script recorder and Microsoft® OLE Automation)

Security Protocols

• SSH1
• SSH2 (IETF SecSh Internet drafts and RFCs 4250–4254, 4256, 4462, 4344, 4345, and 4716)

Cryptographic Library Validation

• FIPS 140-2, Level 1 (certificate #766)

Algorithms

• Ciphers:
• AES (128, 192, and 256 bit)
• 3DES (3 56-bit key EDE)
• Blowfish (128 bit)
• CAST (128 bit)
• Arcfour (128 bit)
• DES (56 bit)
• MACs:
• MD5
• SHA-1
• RIPEMD
• Key exchange:
• RSA
• DSA
• Diffie-Hellman

Authentication

• Password:
• Local
• Windows Domain authentication
• Keyboard interactive:
• RSA SecurID
• RADIUS
• Keyboard-interactive password
• SSH user keys:
• User-key generation support (RSA and DSA)
• Reflection Key Agent (can also use certificates)
• Agent forwarding
• PKI x.509 certificates:
• Reflection Certificate Manager
• Windows Certificate Manager (MSCAPI)
• LDAP/Active Directory retrieval of CRLs and intermediate CA certificates
• PKCS #12 key and certificate storage
• PKCS #11 smart card suport
• GSSAPI:
• Reflection Kerberos client
• Microsoft SSPI logon credentials
• Supports both user and host authentication using GSSAPI

Tunneling

• Local
• Remote
• FTP protocol
• RDP protocol
• X11 protocol

Emulation Types

• VT500 and VT420
• VT320, VT220, and VT100
• VT-UTF8
• Linux Console
• BBS-ANSI and SCO-ANSI
• QNX
• xterm

Administrative Tools

• Support for Windows Terminal Services
• Support for Citrix Presentation Server
• Client support for Windows administration features:
• Windows Installer
• Active Directory
• Group Policies

International Support

• French
• German
• English
• Japanese

Operating Systems

• Microsoft Windows Vista®
• Microsoft Windows XP
• Microsoft Windows 2000
• Microsoft Windows 2000 Server
• Microsoft Windows Server 2003
• Windows Terminal Server
• Citrix Presentation Server

System Requirements

• Any system that meets the minimum requirements for the Microsoft Windows operating system
• Disk space varies depending on the features installed
• Network interface card