Intel announces Intel® SOA Expressway R2.3 and partnership with Sophos for Highly Regulated, Secure SOA

By Joshua Painter (Intel) (12 posts) on October 21, 2009 at 6:35 am

Today, the Intel® SOA Expressway product team has announced some of the great strides it has made with the latest release.

Security Policy Designer: The Intel® SOA Expressway gateway now allows relevant teams from architecture, security & operations to design & enforce policy templates that conform to Enterprise requirements

Policy Dashboard: The updated policy dashboard offers a new view of services with visual representation of policies and features to quickly apply policies to other services, functional operations, or application service endpoints . This delivers unprecedented runtime SOA governance capabilities to monitor and manage services in the data center.

Integrated Governance: Making design time and run time SOA Governance seamless across vendor products has been the desired objective of our customers so that existing investments can be re-used across enterprise-wide implementations. With this release, Intel SOA Expressway now integrates with design time governance solutions from Oracle FMW 11g, Software AG Centrasite and IBM Tivoli for a truly integrated web service governance model

Secure Token Service (STS): The new release of Intel SOA Expressway supports IBM Tivoli Access Manager for delegated authentication/authorization, as well as ability to issue, authenticate, and convert CA SiteMinder and Oracle ObSSO session tokens into SAML assertions. This STS standards-based functionality enables customers to leverage their legacy identity infrastructure and proprietary identity tokens for seamless cross-domain single sign on or identity enabled web services to partner systems

Oracle Fusion Middleware 11g Integration: Intel SOA Expressway also offers support for XACML based fine grained authorization using Oracle® Entitlements Server as PDP/PAP (Policy Decision Point/Policy Application Point). The implementation has been validated on Oracle Enterprise Linux. Deployment of Intel’s SOA Expressway security gateway is now the recommended way to apply perimeter security for B2B services deployed on Oracle Fusion Middleware.

XA Support: Intel SOA Expressway fully supports Open Group’s XA Global Transaction standard for fast update of multiple dependent resources. This is useful across many industries including healthcare where updates can be made to aan individual patient record and these updates can be cascaded to other systems with a single transaction call.

Network HSM: Additionally, Intel and Sophos are announcing a joint partnership and plans to support integration of Intel SOA Expressway and Sophos SafeGuard CryptoServer Hardware Security Module. The partnership brings together two market-leading security products, one for SOA security and one for cryptography, into one integrated solution. For certain applications, customers will need to ensure that asymmetric private keys, symmetric keys (configured out-of-band), and passwords are only visible in the clear within a secure cryptographic boundary that is safe from attacker access. Integration with the Sophos SafeGuard CryptoServer provides this secure boundary in a FIPS 140-2 Level 3 key-storage appliance with centralized management. For clear separation of duties compliance, the security administrator responsible for key management is cleanly separated from the administrator responsible for the operation of the network server running Intel SOA Expressway. The combined solution is well positioned for use in highly regulated industries with stringent security regulations like financial payments ( PCS DSS), government agencies (SIPERNet) and healthcare organizations (HIPAA)

Intel and Sophos will jointly present Intel SOA Expressway and SafeGuard CryptoServer at the CARTES 2009 Conference in Paris Nov17. You can learn more about Intel® SOA Expressway here and more about Sophos’ SafeGuard CryptoServer product here.