Mobility XE is designed to secure network access and all data transmissions through the VPN tunnel—to and from mobile devices in the field. Since Mobility XE is designed for mobile and wireless environments, its security and InterNetwork Roaming capabilities are tightly integrated. As mobile workers and their devices roam across networks, their authentication remains intact and the encrypted VPN session persists.

Mobility XE is certified with RSA SecurID two-factor authentication and supports NTLM and RADIUS authentication protocols to protect networks from unauthorized access. Mobility XE offers single sign-on authentication with standard Microsoft Windows login credentials. This saves mobile workers valuable time as they traverse networks and coverage areas, and provides a more transparent user experience. There are no additional steps to learn or passwords to remember. Single sign-on authentication combined with VPN enforcement also prevents users from circumventing the VPN security.

FIPS validated encryption is the United States government's standard for security. Mobility XE encrypts all data transmitted between the Mobility client and server with AES 128-bit, 192-bit or 256-bit strengths. With FIPS 140-2 validated AES encryption, the industry’s highest security standard, Mobility XE provides the security advantages of an IPSec VPN without its configuration, client provisioning and management burdens.

And because mobile device loss or theft can compromise information on enterprise networks, Mobility XE lets network administrators quickly and easily quarantine lost or stolen devices. Quarantined devices are unable to authenticate to the network and administrators can easily restore network access when the device is recovered.

No other VPN can match Mobility XE’s Application Session Persistence™its ability to sustain application sessions even through suspend-and-resume cycles and loss of connectivity. Other VPNs in these situations lose application sessions—causing data loss and corruption, and forcing users to re-login and restart applications.

When a Mobility XE user encounters a coverage gap, open application sessions are maintained until the user's network connection is re-established. If a user loses connectivity while an application is transmitting data, Mobility XE suspends the transmission—for days if necessary. As soon as connectivity is re-established, Mobility XE resumes transmitting the data at the exact point the application was interrupted.

Mobility XE’s Wireless WAN Optimization automatically reduces network consumption and improves throughput and application responsiveness, particularly over bandwidth-constrained or wireless networks.

Other VPNs typically degrade performance, especially over wireless networks, often by as much as 50%. Mobility XE uses link optimizations to reduce the number of retransmitted packets, excess control information and other network "chatter," and dramatically improves throughput by compressing data and images. Best-Bandwidth Routing technology ensures the fastest and most efficient available network connection is used.

For example, Mobility XE automatically roams to a WLAN connection the moment it becomes available—resulting in greater productivity, improved efficiency and reduced WAN expenses.

Today's mobile workers use a variety of public and private networks such as conventional wired LANs, corporate Wi-Fi networks, third-party hotspots and Wireless WANs available through cellular carriers. Mobility XE's InterNetwork Roaming capability lets mobile workers change networks seamlessly, transparently and securely—without having to think about their network connections or needing to re-authenticate.

Mobility XE's InterNetwork Roaming is tightly integrated with network persistence, application session persistence and single sign-on authentication so that users do not lose application sessions or have to re-login when they traverse networks, go in and out of network range, or suspend and resume their devices.

The Mobility XE server accomplishes this by establishing a virtual IP address for each VPN session. As users roam, enterprise application servers always see the same, unchanging virtual IP address rather than network-specific IP addresses. With Mobility XE, there is no need to re-segment networks, implement VLANs or deploy additional hardware to enable mobile workers to traverse networks seamlessly. They can focus on their work—not configuring, enabling and disabling adapters.

No other VPN provides the spectrum of flexibility, visibility and control afforded by the Mobility XE Management Console. This robust administrative console allows all aspects of the system to be observed and managed in one centralized location. The web-based interface gives administrators a complete system-wide view, from overall metrics down to device connections, worker behavior and application use. Detailed activity logs preserve a historical view of user activity. From the management console, administrators can quarantine devices that are misused, lost or stolen. The "Client Status" tab in this screen shows device connectivity status, number of quarantined devices and even battery life. From this screen, administrators can search for information on a specific user or device, such as open applications, device operating system and interface or port in use.