Symantec Advanced Authentication Reviews

It is a stable and highly customizable solution. Many customers rely on it to secure their banking accounts, integrate with government systems, and manage privileged access across various platforms. Our customers use Symantec Advanced Authentication not only for banking applications but also for providing robust authentication methods such as SMS verification, smartphone app authentication, and email-based authentication. These various authentication mechanisms offer flexibility and security, allowing users to choose the method that best suits their needs while ensuring strong protection for their accounts.

Its adaptability is evident in its integration capabilities with a wide range of systems, including Azure, ServiceNow, and IT service management solutions. This versatility ensures that organizations can leverage it to enforce robust authentication mechanisms tailored to their specific needs.

Symantec's multifactor authentication solution provides tailored processes for customers' banking and enterprise applications. It integrates seamlessly with SMS gateways for SMS verification, offers a secure app for generating tokens without constant internet connectivity, and provides email-based authentication for added flexibility.

Symantec's authentication methods offer flexibility, including tokens and biometrics, enhancing security similar to other products. What sets Symantec apart is its extensive global implementation, stability, and strong security. These qualities have proven to be significant advantages, as they haven't posed any notable threats or challenges for our customers upon deployment.

I would rate the user experience and ease of management with Symantec's product as six out of ten.

Symantec Advanced Authentication can be useful for wherever you require a strong authentication. If you want a strong authentication, second factor authentication, by email, SMS, or soft token, you can use this tool. 

I've had multiple customers running their banking solutions and applications integrated with Symantec. Whether it is web-based applications or PAM applications, privileged access management, it can be integrated with this strong authentication solution. So far, our customers are very happy. 

This solution is deployed on-prem. 

One of the most valuable features of this solution is that it's a strong authentication solution that's able to integrate with applications. 

Right now we are using it only for PIN creation and PIN verification.

It has been pretty good, but there have been a few things that need to be taken away. CA has to know about them.

Rules on Risk Authentication are very good.

Ease of deployment: no need to keep up with physical devices for multi-factor authentication; no software to deploy on end-user computers requiring administrative rights.

The delivery of multi-factor authentication using a SaaS model keeps us from having to keep our servers/infrastructure updated. It also helped us roll out the service much faster than building it out ourselves.

My team migrated away from RSA SecurID hard tokens to the digital certificate-based authentication.

Arcot, for us, is really about multi-factor authentication. We use it on our client's side and, I think, probably the two biggest features of that are from the end-user experience. So, it is basically a token that is stored on the device which represents something you have, but the user actually logs in effectively with a password. They're not really aware that they've got a second factor. So, that's quite nice.

The second distinctive feature is that it has protection against brute force attacks, which means even if you got a hold of the token and you tried to guess passwords or try a brute force circuit, it will always return a value of which you cannot tell whether it is successful at all.

The main benefit is really around the fact that there is a soft token. The cost of having to distribute a hard token isn't there. Some of our colleagues in other business divisions are issuing cards or some other second-factor device. This gets quite expensive, so being able to issue a soft token, but still having fairly strong security, is a big factor for us.

Aside from the two factor authentication requirements that we have, as far as having access to HIPA protected data, there's also the risk engine that helps us evaluate and answer questions like "When was the last time and location that a person accessed that data?" It's infeasible within time and place, they can't have been in Dallas at 3:00 and then at Florida at 3:30 and say, "Yeah, it's the same person accessing that data."

It will therefore help us respond with "Hey, maybe we need to re-evaluate and see if that's really the same person." We try to make sure that our customers only use one device to access that data, preferably their work device. We don't really want them accessing that from their home PCs and potentially exposing that data to other places. So, we'll use device fingerprinting as well to make sure that we are getting them on just that one device and not letting them proliferate on other devices we wouldn't like.

It allows us to assure our customers that we are protecting their data. We deal with a lot of other data. They'll have contractual and as well as Federal requirements to protect that. It's just another tool in our toolbox to make sure that happens.

It tells us exactly what we want in terms of authentication to various applications and provides protection for users who access them. Our users can have access to applications securely through various devices.

It adds a strong layer of security for the multi-factor authentication. Rather than just the one factor with your password, it gives you a one-time password and adds an extra layer of security with encryption. 

For Votorantim bank, the best feature is the token solution. We can analyze any transaction that is declined or blocked. We can make a decision to release or block the transaction or anything else.

CA products are the best fit with our backend systems. CA is the best tool for our backend solution. This solution has made the bank more secure.