February 01, 2004
- Ease of Use:
- Value for Money:
- Overall Rating:
Facilitates SSO to partner sites across the internet.
No graphical configuration interface – you must edit configuration files in text mode.
Offers good SSO functionality as part of a comprehensive authentication and access-control solution for web-based resources.
Cams is designed to control access to web and J2EE application server resources. Resources protected by Cams can reside on the corporate intranet, an extranet, or the internet, and they can be a document, a web application, or almost any other application, data, or even a device.
Cams offers protection for specific web servers through web agents and for all web resources by using Apache as a reverse proxy. APIs are provided to enable the creation of custom web agents.
Using Cams to protect multiple network applications provides SSO for users by sharing authentication and access control information. It supports web SSO within a single DNS domain plus sub-domains. It has a client-server architecture in which distributed Cams web agents delegate the security decisions to the Cams policy server. The web agents then enforce these security decisions.
Cams utilizes caching at both the agent and server levels to improve performance and resilience.
Once a web user has been authenticated, a Cams session is created and an HTTP cookie, with encrypted session information, is sent to the browser. A configurable session time-out expires inactive sessions.
The policy server is configured using four XML files. It is a standalone, Java-based server, which makes it portable to any platform supporting J2SDK 1.4. It also provides full auditing information by logging system and security events into log files.Cams integrates with industry standard LDAP directories, as well as SQL databases. Straight out of the box, it is ready to protect web resources. However, the architecture provides developers with the tools to protect data sources and web services, plus Java, Windows, and Linux/UNIX native code applications.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- Russian intelligence claims to bust up pending banking cyber-attack
- Presidential commission calls for collaborative action to combat cyber-threats
- Russia's banks will be hacked today, apparently
- Met Police grab suspect with phone unlocked to get hold of data
- Researchers hack Visa cards in six seconds