Tumbleweed - Financial Service

Increasing competition, transaction volumes, and customer demand are pressuring companies in the financial services industry to provide more services online. And they are responding. Email, Web applications, and electronic file transfers have become mainstream forms of conducting important financial business—and employing technology for securing, monitoring, archiving, and retrieving these communications has become imperative.

Under SEC Rule 17a-4 and NASD rules 3010 and 3110, financial services firms are required to supervise and record all electronic communication between employees and clients. And the Gramm-Leach-Bliley Act (GLBA) requires them to ensure the security and confidentiality of customer records and information. Ongoing investigations and record multi-million dollar fines in these areas are spurring organizations to re-examine their e-mail compliance efforts and look for technology and automated solutions that can deliver comprehensive compliance at the best cost.

Tumbleweed offers a suite of products that enable banks, brokerages, and insurance providers to ensure the security of online communications quickly and cost-effectively. As a result they can safely migrate high-value, highly sensitive paper- and private network-based transactions to the Internet.

Tumbleweed Solutions for Financial Services

Tumbleweed MailGate™— Threat Prevention, Content Filtering and Encryption

MailGate products are optimized for highly secure, mission-critical financial services environments. MailGate AntiSpam Appliance eliminates spam, email-borne viruses, and other malicious messages before they reach your internal network. MailGate Email Firewall uses financial services lexicons and policies that you define to proactively filter message content, enforce communications policies, identify violations, and enable you to concretely demonstrate compliance with industry, government, and company regulations. And MailGate Secure Messenger applies your policies at the network gateway to ensure that only approved messages leave your network and that they are delivered securely to the intended recipients. Using MailGate products, financial services organizations can:

• Defend your organization’s email infrastructure with comprehensive anti-spam, anti-virus, anti-phishing, and anti-hacker protection at the Internet gateway.
• Filter content to prevent inadvertent leaks of intellectual property, breaches of confidentiality, and other potential policy and regulatory violations.
• Dynamically encrypt messages to ensure privacy and protection of personally identifiable financial information in compliance with regulations such as GLBA.
• Ensure compliance with GLBA, SEC, and NASD regulations by automatically identifying and blocking messages that may be in violation.
• Identify and securely deliver messages that contain personal financial information, including statements, trade confirmations, etc.

Learn More about MailGate - Secure Email Solution

Tumbleweed SecureTransport™— Secure Exchange for Files, Check Images and Payments

Tumbleweed SecureTransport is an enterprise-class file-transfer solution that enables financial institutions to use public networks for secure wholesale customer services and branch connectivity. Financial networks use SecureTransport to move billions of dollars in transactions daily, and 8 of the top 10 U.S. banks use it to serve tens of thousands of corporate customers in compliance with the Gramm-Leach-Bliley and Sarbanes-Oxley Acts. With support for a broad set of standard file-transfer protocols, SecureTransport can move financial transactions, critical business files, large documents, XML, and EDI transactions securely over the Internet and private IP networks, providing a safe alternative to disparate and expensive legacy mechanisms such as leased lines, VPNs, or modem pools. By using SecureTransport to easily convert paper-based or proprietary electronic transfers to a secure, standards-based Internet model, financial services organizations can:

• Automate and secure the flow of information with suppliers, distributors, customers, and strategic partners—without the high cost of VPNs, additional infrastructure, or proprietary software.
• Exchange ACH and SWIFT files, check images, and other critical data with banks, customers, and processors in a confidential, guaranteed, and auditable format.
• Reduce overall IT costs with an enterprise-class architecture that easily scales to support application growth and expansion across multiple business units.
• Provide interactive and automated delivery of payment files and reports to and from corporate customers
• Offer unattended file delivery to complement interactive Web portals for corporate customers.

Learn More about SecureTransport - Secure File Transfer Solution

Tumbleweed Validation Authority (VA)™— Certificate Validation for Financial Transactions

Today, many banks and financial institutions deploy Public Key Infrastructures (PKI) to provide secure communication capabilities for everything from corporate network access to multi-million dollar electronic transactions. PKIs use virtual IDs, or digital certificates, issued by independent Certificate Authorities (CA) to validate the identity of organizations, computers, and individuals. However, the integrity of a PKI system is only as good as the reliability of the validation system, since digital certificates can be revoked, suspended, or expired.

Tumbleweed Validation Authority (VA) delivers a comprehensive, scalable, and reliable framework for validating digital certificates issued by any CA in real time, in turn ensuring the validity and integrity of highly valued and trusted transactions. Validation Authority, which is deployed at the majority of Identrus member banks, utilizes multiple validation protocols for checking the validity of X509V3 digital certificates within PKI environments. The world's most widely deployed OCSP responder, Tumbleweed VA provides numerous benefits for banks and financial institutions with current or planned PKI deployments:

• Support for, SWIFT Trust Act, NewBACS, Identrus, and Global Trust Authority (GTA)
• Integral part of leading financial trust infrastructures including Identrus and newBACS
• Certificate validation policy enforceable on a per-CA Basis
• Compatible with a variety of proxy and directory servers
• Broadly adopted within banking communities
• FIPS 140-1 Level 1, 3 & 4-compliant using HSMs
• Resolves security problems for PKI environments not currently checking certificate revocation status
• Easy to configure, deploy, and maintain

Learn More about Validation Authority - Identity Validation Solution

Interested in Tumbleweed solutions? Please contact us.