Scribd Logo
Upload

Welcome to Scribd!

  • 6 views

    NCP DS Enterprise Android Client

    Uploaded by

    virusacc007
    down

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    NCP DS Enterprise Android Client

    Uploaded by

    virusacc007
    6 views6 pages
    down

    Original Title

    NCP_DS_Enterprise_Android_Client

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    down

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    6 views6 pages

    NCP DS Enterprise Android Client

    Uploaded by

    virusacc007
    down

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 6

    Data Sheet

    NCP Secure Enterprise


    Android Client
    Data Sheet NCP Secure Enterprise Android Client

    Universal Centrally Administered


    VPN Client for Android version 4.4 or later
     Central Management
     Compatible with all VPN Gateways
    (IPsec Standard)
     Import configurations from 3rd party products
     Fallback IPsec / HTTPS
    (VPN Path Finder Technology)
     FIPS Inside
     Strong authentication (eg. Certificate), Biometrics
     Multi certificate support
     Reconnect mode (Always On)
     Android version 4.4 and later
     No need to "root" the operating system
     Available from NCP Distributors and Partners
     Free of charge 30-day full version

    Universally Applicable
    The NCP Secure Enterprise Android VPN Client
    enables a highly secure Virtual Private Network (VPN)
    connection to the corporate networks of companies
    or organizations. Access to multiple networks is
    supported, each connection being defined by its own
    VPN profile. Infrastructure). "Multi certificate support" enables
    VPN connections between the one device and
    Using standard IPsec protocols, connections can be different companies, even when each company
    established from tablets and smartphones to the demands an individual user certificate.
    VPN gateways of all well-known manufacturers.
    The embedded cryptographic module is validated
    Auto reconnect provides permanent remote access according to FIPS 140-2 (Certificate #1747),
    to central resources and information. Implementation Guidance section G.5.

    NCP Path Finder Technology enables remote access


    even when the device is located behind firewalls or Usability and Cost Effectiveness
    proxies that would otherwise hinder the The intuitive, graphical user interface not only makes
    establishment of an IPsec tunnel. NCP Secure Android Clients "easy to use", but also
    keeps the user continuously updated on the state
    and security level of the connection, both while the
    Security
    VPN is established and while it is disconnected.
    The strong authentication of the NCP Secure
    Enterprise Android VPN Client provides Detailed logs help to ensure rapid support from the
    comprehensive protection against access by helpdesk in the event of unforeseen problems.
    unauthorized third parties. Usability, in turn, means cost savings as less training
    and documentation are required, and the load on the
    Data encryption: support for OTP (One Time helpdesk is reduced.
    Password) tokens and certificates in a PKI (Public Key

    NCP engineering GmbH Status: June 2022 Page 2 of 6


    Version: 4.12
    Data Sheet NCP Secure Enterprise Android Client

    Central Management
    The NCP Secure Enterprise Android VPN Client is
    optimized for management by NCP's Secure
    Enterprise Management (SEM). SEM incorporates
    extensive Endpoint Security capabilities which can be
    integrated, for example, in the central manage and
    distribution of user configurations and certificate
    updates.

    NCP engineering GmbH Status: June 2022 Page 3 of 6


    Version: 4.12
    Data Sheet NCP Secure Enterprise Android Client

    Operating Systems Android 4.4 and above


    Central Management Distribution of VPN configurations and certificates from the NCP Secure Enterprise
    Management
    Standards Support of all Internet Society IPsec Standards
    Virtual Private Networking IPsec (Layer 3 Tunneling), RFC conformant; IPsec proposals can be determined by the
    IPsec Gateway (IKE, IPsec Phase 2); Event log; Communication only in tunnel;
    MTU Size Fragmentation und Reassembly; DPD; NAT-Traversal (NAT-T); IPsec Tunnel Mode
    Encryption Symmetric processes: AES 128,192,256 bits; Blowfish 128,448 bits; Triple DES 112,168 bits;
    Dynamic processes for key exchange: RSA to 2048 bits; Seamless Rekeying (PFS);
    Hash Algorithms: SHA-256, SHA-384, SHA-512, MD5, DH Groups 1, 2, 5, 14-18
    FIPS Inside The NCP Secure Android Client uses an embedded FIPS 140-2-validated cryptographic module
    (Certificate #1747) running on an Android platform per FIPS 140-2 Implementation Guidance
    section G.5 guidelines.
    FIPS conformance will always be maintained when any of the following algorithms are used for
    establishment and encryption of the IPsec connection:
     Diffie Hellman Group: Group 2 or higher (DH starting from a length of 1024 bits)
     Hash Algorithms: SHA1, SHA 256, SHA 384 or SHA 512 bits
     Encryption Algorithms: AES with 128, 192 or 256 bits or Triple DES
    Authentication Process IKEv1 (Aggressive und Main Mode), Quick Mode; XAUTH for extended user authentication;
    IKE Config Mode for the dynamic assignment of a virtual address from an internal pool (private
    IP) ; PFS
    IKEv2
    Pre-Shared Secrets
    Strong authentication PKCS#12 Interface for using User (Soft) Certificates, biometric Authentication with fingerprint,
    Multi Certificate configuration
    One-Time Passwords and Challenge Response System; RSA SecurID Ready
    Network Protocol IP
    Auto Reconnect A connection is automatically established if the Internet connection has been interrupted or
    the communication medium has changed from WiFi to mobile data transmission.
    Configurable connection mode (always, manual)
    VPN Path Finder NCP VPN Path Finder Technology, Fallback IPsec /HTTPS (Port 443) when port 500 or UDP
    encapsulation can not be used (prerequisite: NCP VPN Path Finder Technology required at the
    VPN Gateway
    IP Address Assignment DHCP (Dynamic Host Control Protocol); DNS: central VPN gateway selection using
    public IP address allocated by querying a DNS server
    Line Management DPD (Dead Peer Detection) with configurable polling interval; Short Hold Mode; WLAN-
    Roaming (Handover); Timeout
    Data Compression IPCOMP (lzs), Deflate
    Other Features UDP encapsulation
    Import function supporting file formats: *.ini, *.pcf, *.wgx and *.spd
    Internet Society RFC 2401 –2409 (IPsec), RFC 3947 (NAT-T negotiations), RFC 3948 (UDP encapsulation),

    NCP engineering GmbH Status: June 2022 Page 4 of 6


    Version: 4.12
    Data Sheet NCP Secure Enterprise Android Client

    RFCs and Drafts IP Security Architecture, ESP, ISAKMP/Oakley, IKE, XAUTH, IKECFG, DPD, NAT Traversal (NAT-
    T), UDP encapsulation, IPCOMP
    Client Monitor English; Connection control and management, connection statistics, log files; trace tool for
    Intuitive GUI error diagnosis; traffic light icon indicates connection status

    Further information about the managed NCP Secure Android Client is available from:
    https://www.ncp-e.com/en/products/centrally-managed-vpn-solution/managed-clients-mobile/

    FIPS 140-2 Inside

    NCP engineering GmbH Status: June 2022 Page 5 of 6


    Version: 4.12
    NCP engineering GmbH NCP engineering, Inc.
    Dombuehler Str. 2 19321 US Highway 19 N, Suite 401
    90449 Nuremberg Clearwater, FL 33764
    Germany USA

    +49 911 9968 0 +1 650 316 6273


    info@ncp-e.com info@ncp-e.com
    www.ncp-e.com www.ncp-e.com

    You might also like