GSW FIPS 140-2 Compliant SSH2 Server and Clients

Federal Information Processing Standards(FIPS)140-2

GSW SSH2 Server and clients provide a FIPS 140-2 compliant option for those entities with requirements to meet cryptographic module security standards to protect sensitive and valuable data. FIPS standards are either mandated or recommended for use in federal government information technology (IT) systems. So in addition to all the security benefits of the GSW SSH2 Server you have FIPS 140-2 compliance.

Under contract with the United States Military, GSW developed a SSH2 FIPS 140-2 compliant solution, Client and Server (End to End) to meet their requirements. 

GSW is able to make this FIPS 140-2 compliant solution commercially available for other Federal and State agencies  as well as other institutions and  private enterprises with the need or desire to comply with this security requirement.

Many companies have strong security requirements such as SSH2 or FIP 140-2. If you have demanding security requirements, the GSW SSH2 with the optional FIPS 140-2 compliant option may be of interest to you.. Secure Shell (SSH2) version 2 provides a secure channel for remote access to your Windows host.

End to End Security - If it's not End to End it's Not Secure

 The GSW FIPS 140-2 compliant SSH2  Server, includes FIPS 140-2 compliant clients, at no extra cost. Your don't have to take chances, GSW provides the End to End security you can count on. Ensure  END to END compliance by permitting only GSW FIPS 140-2 compliant clients to connect! Its configurable!

The GSW SSH2 Server with FIPS 140-2 compliance  option provides both TRUE client and server compliance for organizations that must meet these high standards.  Please be sure to review the associated documents to get a better understanding of the importance of End to End security.

Sometimes vendors of incomplete solutions will claim that since the devices' operating system is FIP 140-2 compliant that any SSH2 client  running on it is FIPS 140-2 automatically compliant too.

This is NOT TRUE

Do not believe it. The SSH2 client does not automatically inherit all the operating system qualities. Just as having a 64-bit operating system, does not make all the applications 64-bit applications, a FIPS 140-2 compliant OS does not make the client FIPS 140-2 compliant.

However it is true that a FIPS 140-2 client must run on a FIPS 140-2 compliant operating system or internally contain all FIPS 140-2 certified cryptographic modules.

These are critical distinctions, that make the difference in being FIPS 140-2 compliant or not.

The GSW FIPS Compliant SSH2 Server and clients are FIPS 140-2 compliant when running on FIPS 140-2 compliant operating systems.

With respect to the client device operating system, the significant aspect is that the version of the cryptographic module rsaenh.dll must be NIST(National Institute of Standards and Technology) certified, which begins with build 14343.0.0.0. With Windows CE 5.0 extra attention should be taken to ensure the correct version of rsaenh.dll is present. Per information from Microsoft support early versions of Windows CE 5.0 did not come with a FIPS 140-2 certified version of rsaenh.dll. This may require contacting the device vendor to determine the correct version number of that cryptographic module.

• Additional material on FIPS 140-2 is available below.

View our flyer on End to End Security

FIPS 140-2 specifies the security requirements that will be satisfied by a cryptographic module utilized within a security system protecting sensitive or valuable data.  What are you doing to combat the onslaught of new and growing security threats? GSW SSH2 Server with the FIPS 140-2 option increases security while speeding the time to compliance.   View the document on the left and learn more about GSW SSH2 with FIPS 140-2 compliant option!

• Additional material on GSW SSH and UTS Security is below.

Yes, security is serious business. Keep alert to some common  "Weasel words", ambiguous or misleading terms that give you a false sense of security. Here are some questions to consider

VERY POWERFUL TOOL Minimize problems from the start. If they are not supposed to be on your server - Don't let them on! If they are allowed on to perform a job, let them perform the job and not be distracted with other options.

The GSW SSH2 Server provides Secure Remote Access to your Windows host including Secure Remote Logon, Secure Data Exchange and Secure Access to you application on an Insecure Network! No Clear Text a requirement? The GSW SSH2 Server provides no clear text - period.  Visit the GSW SSH2 Server page.