Call a Specialist Today! 800-886-5369

NCP Secure Entry Client for Mac OS
Simple and Highly Secure Remote Access via Internet

NCP Secure Entry Client for Mac OS

NCP Products
NCP Universal VPN Client Suite
NCP Secure Entry Mac Client, 1 to 9 users
*Price per user. Quantity must be 1 or greater
#NEYM1
Our Price: $113.85
NCP Secure Entry Mac Client, 10 to 24 users
*Price per user. Quantity must be 10 or greater
#NEYM2
Our Price: $94.30
NCP Secure Entry Mac Client, 25 to 49 users
*Price per user. Quantity must be 25 or greater
#NEYM3
Our Price: $87.40

More pricing below, click here!

Overview:

The NCP Secure Entry Mac Client is a component of NCP's Next Generation Network Access Technology. The IPsec standard forms the basis of highly secure data connections to VPN gateways of all well-known providers. The connection is set up via any network (including iPhone tethering via USB or Bluetooth). From anywhere in the world, mobile users can access a corporate network with their Mac. The NCP Secure Entry Client Mac is easy to install and to use. And the intuitive, graphical user interface shows all connection and security states before as well as during data connections.

Features:

Secure

Rely on high-quality IT security software made in Germany

  • IPv6 supported dynamic personal firewall
  • data encryption
  • strong authentication
  • multi-certificate support
  • parameter locks
  • FIPS Inside
  • support of OTP (one time password tokens) and certificates in a PKI (Public Key Infrastructure)

Efficient

Mindful of one of the biggest challenges organizations face – cost savings

  • Budget Manager for full cost control
  • support for 3G/4G hardware (LTE)
  • Custom Branding Option

Ease of use

Reduced IT complexity

  • a single and easy-to-use user interface (one click) for the connection setup
  • integrated support for 3G/4G hardware
  • a reliable, uninterrupted VPN connection
  • automatic, location-aware adaption of firewall rules through the NCP VPN Client
  • automatic media recognition
  • seamless Roaming
  • easy domain registration

Mobile

The best mobile device user experience

  • Working without dropped connections or interruptions even when switching between networks, i.e. seamless roaming
  • auto-connect to your corporate network
  • reliable and uninterrupted VPN connections
  • quick and secure hotspot logon
  • Remote Access even behind firewalls, whose port settings typically deny IPsec based communication, i.e. NCP Path Finder® Technology

Technical Data:

Secure Entry Client for Mac OS: Technical Data
Operating Systems OS X 10.10 Yosemite, OS X 10.9 Mavericks, OS X 10.8 Mountain Lion
Security Features The NCP Secure Entry Mac Client supports the Internet Society’s Security Architecture for the Internet Protocol (IPsec) and all the associated RFCs
Personal Firewall
  • Stateful Packet Inspection
  • IP-NAT (Network Address Translation)
  • Friendly Net Detection (Firewall rules adapted automatically if connected network recognized based on its IP subnet address or an NCP FND server)
  • Differentiated filter rules relative to: protocols, ports and addresses, LAN adapter protection
  • In contrast to the application based configuration of the built-in Mac OS X firewall, the configuration of this firewall is port based.
Virtual Private Networking
  • IPsec (Layer 3 Tunneling)
  • IPsec proposals negotiated via IPsec gateway (IKE Phase 1, IPsec Phase 2)
  • Communication only in tunnel
  • Message Transfer Unit (MTU) size fragmentation and reassembly
  • Dead Peer Detection (DPD)
  • Event log
  • Network Address Translation-Traversal (NAT-T)
  • IPsec Tunnel Mode
Authentication Internet Key Exchange (IKE):
  • Aggressive mode and Main mode,
  • Quick mode
Perfect Forward Secrecy (PFS)
  • IKE Config. mode for dynamic allocation of private IP (virtual) address from address pool
  • Pre-shared secrets or RSA Signatures (and associated Public Key Infrastructure)
User authentication:
  • XAUTH for extended user authentication
  • One-time passwords and challenge response systems
  • Authentication details from certificate (prerequisite PKI)
Support for certificates in a PKI:
  • Multi Certificate Configurations for PKCS#11 and PKCS#12 interfaces
  • Seamless rekeying (PFS)
IEEE 802.1x:
  • Extensible Authentication Protocol – Message Digest 5 (EAP-MD5): Extended authentication relative to switches and access points (layer 2)
  • Extensible Authentication Protocol – Transport Layer Security (EAP-TLS): Ex-tended authentication relative to switches and access points on the basis of certificates (layer 2)
RSA SecurID ready
Encryption and Encryption Algorithms Symmetrical: AES 128,192,256 bits; Blowfish 128,448 bits; Triple-DES 112,168 bits
Asymmetrical: RSA to 2048 bits, dynamic processes for key exchange
Perfect Forward Secrecy
FIPS Inside The IPsec Client incorporates cryptographic algorithms conformant with the FIPS standard. The embedded cryptographic module incorporating these algorithms has been validated as conformant to FIPS 140-2 (certificate #1051). FIPS compatibility is always given if the following algorithms are used for set up and encryption of the IPsec connection:
  • DH Group: Group 2 or higher (DH starting from a length of 1024 Bit)
  • Hash Algorithms: SHA1, SHA 256, SHA 384, or SHA 512 Bit
  • Encryption Algorithms: AES with 128, 192 and 256 Bit or Triple DES
Hash / Message Authentication Algorithms
  • SHA-256, SHA-384, SHA-512, MD5
  • Diffie Hellman groups 1, 2, 5, 14 used for asymmetric key exchange and PFS
Public Key Infrastructure (PKI) - Strong Authentication
  • X.509 v.3 Standard;
  • PKCS#11 interface for encryption tokens (USB and smartcards);
  • PKCS#12 interface for private keys in soft certificates;
  • PIN policy; administrative specification for PIN entry in any level of complexity;
  • Revocation:
    • End-entity Public-key Certificate Revocation List (EPRL formerly CRL)
    • Certification Authority Revocation List, (CARL formerly ARL)
    • Online Certificate Status Protocol OCSP
Networking Features Any type of network, iPhone tethering via USB or Bluetooth
Secure Network Interface Interface Filter
  • NCP Interface Filter interfaces to all standard Network Interfaces from the PPP and Ethernet families.
  • Wireless Local Area Network (WLAN) support
  • Wireless Wide Area Network (WWAN) support
Network Protocol IP
Communications Media
  • LAN
  • Communications media supported using Apple or 3rd party media interfaces and management tools:
    • LAN / Ethernet
    • Wi-Fi
    • GPRS / 3G and GSM
    • ISDN
    • Modem
  • iPhone tethering via USB or Bluetooth
VPN Path Finder Fallback to HTTPS (port 443) from IPsec if neither port 500 nor UDP encapsulation are available (prerequisite: NCP Secure Enterprise Server V 8.0 and later)
IP Address Allocation
  • Dynamic Host Control Protocol (DHCP)
  • Domain Name Service (DNS): gateway selection using a public IP address allocated by querying a DNS server
Line management DPD with configurable time interval;
Data Compression IPCOMP (lzs), deflate
Additional Features UDP encapsulation, import of the file formats:*.ini, *.pcf, *.wgx, *.wge and *.spd.
Internet Society RFCs and drafts Security Architecture for the Internet Protocol and assoc. RFCs (RFC2401 - 2409), Internet Key Exchange Protocol (IKE) (includes IKMP/Oakley) (RFC 2406), Negotiation of NAT-Traversal in the IKE (RFC 3947), UDP encapsulation of IPsec Packets (RFC 3948), IKE Extended Authentication (XAUTH), IKE configure (IKECFG) and Dead Peer Detection (DPD)
Client Monitor Multilingual (English, German)
Monitor & Setup: de, en
Online Help and License de, en
Intuitive, Graphical User Interface
  • Traffic light icon indicates connection status
  • Configuration, connection statistics, Log-book (color coded, easy copy&paste function)
  • Password protected configuration and profile management
  • Trace tool for error diagnosis
  • Monitor can be tailored to include company name or support information
  • Options for starting the Monitor automatically after system reboot: either maximized, or as an icon in the menu bar
Tip of the Day Traffic light icon indicates connection status
Configuration, connection statistics, Log-book (color coded, easy copy&paste function)
Password protected configuration and profile management
Trace tool for error diagnosis
Monitor can be tailored to include company name or support information
Options for starting the Monitor automatically after system reboot: either maximized, or as an icon in the menu bar
Project Logo Clicking on the banner in an additional field in the Client Monitor will open a local HTML page in the Mac OS X’s default browser. The banner can be replaced by a company logo and the local HTML page by a page of your choice. Both files are located in the Client’s installation directory under /ProjectLogo as logo_en.png and secure_entry_banner_en.html. In addition a “Quick-Info“ tip can be displayed when the mouse moves over the banner

*) If you wish to download NCP's FND server as an add-on, please click here: https://www.ncp-e.com/en/resources/download-vpn-client.html
Option: central management and endpoint security (upgrade NCP Secure Enterprise Client)

Documentation:

Download the NCP Secure Entry Client for Mac OS Datasheet (PDF).

Pricing notes:

NCP Products
NCP Universal VPN Client Suite
NCP Secure Entry Mac Client, 1 to 9 users
*Price per user. Quantity must be 1 or greater
#NEYM1
Our Price: $113.85
NCP Secure Entry Mac Client, 10 to 24 users
*Price per user. Quantity must be 10 or greater
#NEYM2
Our Price: $94.30
NCP Secure Entry Mac Client, 25 to 49 users
*Price per user. Quantity must be 25 or greater
#NEYM3
Our Price: $87.40
NCP Universal VPN Client Suite Update
NCP Secure Entry Mac Client Update, 1 to 9 users
*Price per user. Quantity must be 1 or greater
#UEYM1
Our Price: $56.93
NCP Secure Entry Mac Client Update, 10 to 24 users
*Price per user. Quantity must be 10 or greater
#UEYM2
Our Price: $47.15
NCP Secure Entry Mac Client Update, 25 to 49 users
*Price per user. Quantity must be 25 or greater
#UEYM3
Our Price: $43.70