General FAQ

The secure business network strategy goes beyond protecting corporate assets and enabling new business models such as extranets, secure intranets, and secure remote access. In actuality, each customer needs to define the goals they have for their own secure business network, so each organization will have different implementations that map to those goals.

The secure business network is not unique to Sun. What is unique is Sun's position in making SunScreen Secure Net pervasive throughout an organization and integrated into a customer's network environment. To date, security vendors have been point-product vendors. Typically, previous offerings have not been complete or affordable enough to deploy everywhere. In addition, consulting services are sometimes needed to help in defining and implementing a secure business network. Sun focuses on both the products and services needed to make the secure business network a reality.

Sun wants to make the secure business network a reality. In discussing the needs with large customers and analysts, a common theme kept reoccurring: customers want platform vendors to take leadership and make security an integral part of their products. The point-product approach will no longer work because the issues discussed previously are not addressed. With Sunscreen Secure Net, the service and consulting needed by customers is part of the solution.

SunScreen Secure Net 3.1 includes the SunScreen 3.1 firewall products as well as SunScreen SKIP 1.5.1 for the Solaris Operating Environment and SunScreen SKIP 3.0.7 for Microsoft Windows. SunScreen SKIP provides strong, standards-based multiplatform client encryption for Microsoft Windows 95, 98, 98 Second Edition, and NT clients as well as Solaris software clients.

The SunScreen Secure Net 3.1 solution allows customers to more easily deploy a secure business network because it is comprehensive; provides perimeter defense, extranets, remote access, and intranets; and can be more affordable. In addition, SunScreen Secure Net 3.1 provides the high availability, performance, centralized management, and strong standards-based encryption that is critical for a secure business network.

While there has been some relaxation in the export requirements, there are many restrictions that are still in place for strong (128-bit) encryption products. For the complete 33-page report, please visit www.epic.org/crypto/export_controls/regs_1_00.html. Note also that a vendor's product status is dependent on the type of application they have with the government. Contrary to some articles in the press, export of encryption items is still a complicated, multidimensional issue.

SunScreen Secure Net 3.1 is offered in 56-bit encryption. 56-bit SunScreen Secure Net 3.1 can be exported to any end user, including foreign governments worldwide, except for Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Serbia/Montenegro (Yugoslavia), Sudan, Syria, and all the parties listed on the Denied Parties List.

You separately order SunScreen SKIP in 128-bit strength encryption, SKPIS-151ND999, and update the SKIP in SunScreen Secure Net 3.1. You now have SunScreen Secure Net 3.1 with 128-bit strength encryption.

Sun can export the 128-bit SunScreen SKIP to all worldwide, non-government end users, except for Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Serbia/Montenegro (Yugoslavia), Sudan, Syria, and all the parties listed on the Denied Parties List. Sun cannot sell 128-bit encryption products to foreign governments.

Government, as defined in the Export Administration Regulations, are:

Government End User (as applied to encryption items). A government end user is any foreign central, regional, or local government department, agency, or other entity performing governmental functions, including governmental research institutions, governmental corporations or their separate business units (as defined in part 772 of the EAR) that are engaged in the manufacture or distribution of items or services controlled on the Wassenaar Munitions List, and international governmental organizations.

This term does NOT include: utilities (including telecommunications companies and Internet service providers); banks and financial institutions; transportation; broadcast or entertainment; educational organizations; civil health and medical organizations; retail or wholesale firms; and manufacturing or industrial entities not engaged in the manufacture or distribution of items or services controlled on the Wassenaar Munitions List.