Secure Global Desktop 4.40 Administration Guide > Security > Introducing SGD Security Services

Introducing SGD Security Services

SGD security services allows SGD to use the Secure Sockets Layer (SSL) to provide secure connections, for example between client devices and SGD servers.

Secure connections have the following benefits:

• No message forgery - SSL requires that a server proves its identity before communication can take place. This also guards against replay attacks.
• No eavesdropping - SSL encrypts all information before transmission.
• No tampering - SSL can check that a message has not changed during transmission.

Internet transactions are open to many forms of attack, for example packet-sniffing, DNS spoofing, and man-in-the-middle attacks. It is critical to recognize that even when SSL is used, a connection is only secure if SSL is configured correctly.

SGD security services can only help raise security levels as part of an ongoing security strategy. They can not transform your intranet into a high-security installation by itself.

SGD security services can be used to secure the following connections:

• Connections between a Sun Secure Global Desktop Client and an SGD server
• Connections between the SGD servers in an array
• Connections to an LDAP directory server or Microsoft Active Directory

Copyright © 1997-2007 Sun Microsystems, Inc. All rights reserved.