Security Solution Checklist

Links on this page:
   Data-at-Rest
   Data-in-Transit
   PKI
   Dev. Tools
   Export Regs

Strong protection for sensitive data-at-rest and/or data-in-transit

SecretAgent®
ISC's premiere file encryption utility. Provides file and e-mail confidentiality as well as sender and message authentication. For Windows, Windows Mobile, Mac OS X, and all popular UNIX platforms.
     SecretAgent 5.x Product Information (GUI and API tools)
     SecretAgent DAS (server-mediated decryption for Communities of Interest) - New!
     Command Line Interface (SA5CLI)
     Client-side Certificate Management and PKI Services (Certificate Explorer)
     Administering Security Policies (PolicyAgent)
     Using SecretAgent Key Recovery (Key Recovery Utility)

SpyProof!®
The perfect tool to secure data on your local PC or notebook. Creates sharable, AES-encrypted, virtual drives on your local hard disk or on a remote server. Also allows you to secure and distribute sensitive data stored on all types of removable media, including CDs, DVDs, zip disks, SD and compact flash cards, and memory sticks. Currently available for Windows NT4/2000/XP/2003 only.
     SpyProof! Product Information
     Administering Security Policies (PolicyAgent)

PolicyAgent™
Create digitally-signed security policy files that ensure enterprise-wide compliance with your organization's guidelines governing the use of ISC cryptographic products. Requires Microsoft Windows but produces platform-independent security policy files that control SecretAgent and SpyProof! on all supported platforms.
     Creating Security Policies (PolicyAgent)

Credential Management and PKI Support

CertAgent™
ISC's X.509 certificate authority issues version 3 certificates and CRLs; supports remote administration and manual or automatic processing of PKCS#10 certificate requests submitted via browser or e-mail; includes integrated LDAP certificate repository. Its HTML/Java RMI-based technology is easy to customize and maintain. For Windows NT4/2000/XP/2003, Linux, and Solaris.
     CertAgent Release 3.0 Product Information

Credential Management Utility (CMU)
Allows system administrators to automate many common PKI maintenance tasks that end users often find very difficult to perform manually. Available for Windows only.
     CMU Product Information

CSP^id™    New!
An operating system-agnostic virtual smartcard with an integrated credential store and PKCS#11, Java, and CAPI interfaces that make its keys and cryptographic operations available to all applications (including CAPI- and non-CAPI-aware browsers). Its graphical user interface simplifies the PKI experience for end-users, allowing credentials to be moved effortlessly between workstations and obviating the need to replicate keys across independent applications. Its command line interface allows security officers to automate PKI enrollment, key rollover, and credential backup operations, among other tasks. Providing superior protection for private keys, it overcomes the password change/reset issues that plague IE and Mozilla. For Windows, Linux, and Solaris.
     CSP^id Product Information

Application Development Tools

Cryptographic Development Kits (CDKs)
For developers wanting to add security to their mission-critical applications, ISC's CDK offers FIPS 140-1 certified implementations of today's standard cryptographic algorithms in the form of linkable libraries. For Windows and all popular UNIX platforms.
     CDK Product Information

SecretAgent APIs
Embed fully SecretAgent-compatible, file- or buffer-based cryptographic operations into your own applications. For Windows and all popular UNIX platforms.
     SecretAgent Application Programming Interface (SA5API)

Federal Buyers Guide

Export Regulations

ISC products are subject to the export control laws administered by the United States Bureau of Industry and Security (BIS). Their Export Administration Regulations provide information on a wide variety of export restrictions and must be consulted if you are planning to export our software.

Generally speaking, ISC may freely export its products under License Exception ENC to all but a handful of embargoed countries and denied parties. Specifically, our products have been assigned the following Licensing Mechanisms:

ECCN: Export Control Classification Number assigned by BIS in the Commerce Control List (CCL). This is the fundamental designation indicating the level of control for an item.  ISC products fall under one of the following two ECCNs:

• 5D002 - Information Security - Software (encryption using keys larger than 64 bits)

• 5D992 - Information Security - Software (encryption using keys less than or equal to 64 bits in length, or data authentication)

LIC:  The license type for all ISC products is "ENC Unrestricted" which indicates that the software is eligible for "ENC" under Sections 740.17(a) and 740.17(b)(3) of the EAR.

CCATS: Commodity Classification Automated Tracking System, the code number assigned by BIS to products that it has classified against the CCL. The CCATS number for each ISC product classified 5D002 is provided because some encryption exports require post-shipment reporting to BIS and this number is a mandatory element of these reports.

Entities wishing to export our COTS products, or products incorporating our CDK, are advised to seek their own legal counsel and to consult the BIS Regulations referenced above.