General FAQ

The secure business network strategy goes beyond protecting corporate assets and enabling new business models such as extranets, secure intranets and secure remote access. In actuality, each customer needs to define the goals they have for their own secure business network, so each firm will have different implementations that map to those goals.

The secure business network is not unique to Sun. What is unique is Sun's position in making SunScreen Secure Net pervasive throughout an organization and integrated into a customer's network environment. To date, security vendors have been point-product vendors. Typically, previous offerings have not been complete or affordable enough to deploy everywhere and thus make the secure business network a reality. In addition, consulting services are sometimes needed to help in defining and implementing a secure business network. Sun focuses both on the products and services needed to make the secure business network a reality.

Sun wants to make the secure business network a reality. In discussing the needs with large customers and analysts, a common theme kept reoccurring: customers want the platform vendors to take leadership and make security an integral part of their products. The point-product approach will not work anymore since the issues discussed previously are not addressed. The service and consulting needed by the market is part of the Sunscreen Secure Net solution.

SunScreen Secure Net 3.1 includes SunScreen 3.1 and SunScreen SKIP for Solaris and Microsoft Operating Environments. SunScreen SKIP provides strong standard-based multiplatform client encryption for Windows 95, Windows 98 and Windows NT clients as well as Solaris clients.

The SunScreen Secure Net 3.1 solution allows customers to more easily deploy a secure business network because it is comprehensive: provides perimeter defense, extranets, remote access and intranets and can be more affordable. In addition, SunScreen Secure Net 3.1 provides the high availability, performance, centralized management, and strong standards-based encryption that is critical for a secure business network.

While there has been some relaxation in the export requirements there are many restrictions that are still in place for strong (128 bit) encryption products. See http://www.epic.org/crypto/export_controls/regs_1_00.html for the complete 33 page report. Note also that a vendor's product status is dependent on the type of application they have with the government. Contrary to some articles in the press, export of encryption items is still a complicated, multi-dimensional issue.

SunScreen Secure Net 3.1 is offered in 56 bit encryption. 56-bit SunScreen Secure Net 3.1 can be exported to any end-users, including foreign governments, worldwide, except: Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Serbia/Montenegro (Yugoslavia), Sudan and Syria, plus all the parties listed on the Denied Parties List.

You separately order SKIP in 128 bit strength encryption, SKPIS-151ND999, and update the SKIP in SunScreen Secure Net 3.1. You now have SunScreen Secure Net 3.1 with 128 bit strength encryption.

Sun can export the 128-bit SKIP to all worldwide NON-government end-users, worldwide, except: Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Serbia/Montenegro (Yugoslavia), Sudan and Syria, plus all the parties listed on the Denied Parties List. Sun can NOT sell 128 bit encryption products to foreign governments.

Government, as defined in the Export Administration Regulations:

Government End-User (as applied to encryption items). A government end-user is any foreign central, regional or local government department, agency, or other entity performing governmental functions; including governmental research institutions, governmental corporations or their separate business units (as defined in part 772 of the EAR) which are engaged in the manufacture or distribution of items or services controlled on the Wassenaar Munitions List, and international governmental organizations.

This term does NOT include: utilities (including telecommunications companies and Internet service providers); banks and financial institutions; transportation; broadcast or entertainment; educational organizations; civil health and medical organizations; retail or wholesale firms; and manufacturing or industrial entities not engaged in the manufacture or distribution of items or services controlled on the Wassenaar Munitions List.