网络设备3A管理（AAA）

芯盾时代网络设备3A管理系统（AAA），支持Radius与Tacacs+认证协议，实现网络设备认证、授权、审计功能，兼容主流厂商网络设备型号，支持替换思科ISE系统。

产品功能

用户与应用管理支持企业组织用户同步与管理、用户组管理；提供 Radius、Tacacs + 设备及设备分组管理，实现对用户和应用资源的统筹管控。

认证授权审计一体化集成密码、OTP 等多种认证方式，支持 Radius 和 Tacacs + 协议，提供设备访问、细粒度属性及命令行授权；同时具备管理日志与协议日志审计功能，保障操作安全合规。

移动认证安全保障提供适配 Android、iOS、HarmonyOS 的 OTP APP，支持在线与离线认证，并通过高强度设备指纹与软件安全沙箱技术，确保移动认证终端的安全性。

应用场景

Radius认证授权

通过Radius协议实现网络设备认证和授权，适用于支持Radius协议的网络设备。
Tacacs+认证授权

通过Tacacs+协议实现网络设备认证和授权，适用于支持tacacs+协议的网络设备。
网络设备分组管理

支持对网络设备进行分组管理，基于分组进行管理员分级管理，基于分组进行设备认证与授权策略管理。

产品特色

设备兼容性好

通过Radius、Tacacs+认证授权协议兼容主流厂商网络设备，比如华为、华三、思科、深信服、山石网科、迪普、弘积等。

无缝替换国外竞品

无缝替换思科ISE产品，网络设备零配置改动。

安全OTP技术

通过移动设备指纹、安全沙箱、TOTP算法、白盒算法保障OTP认证安全性。

灵活认证策略

支持密码、OTP、密码+OTP灵活认证策略，基于用户、设备维度设置。

Products & Services

Human-Centered Zero Trust Business Security Protection System

Home > Products > Enhanced Identity and Access Management (EnIAM) > Network Device 3A Management System (AAA)

Network Device 3A Management System (AAA)

Trusfort Network Device 3A Management System (AAA) supports Radius and Tacacs+ authentication protocols, realizes the functions of network device authentication, authorization, and auditing, is compatible with mainstream manufacturers' network device models, and supports replacement of Cisco ISE system.

Functions

User and Application Management Use the endpoint security's core technologies with patents (mobile device fingerprint, software security sandbox, endpoint security defense), and integrate push, QR-code scanning, OTP, biological authentication and other technologies to provide customers with a variety of mobile security password-less authentication methods.

Integration of Authentication, Authorization, and Auditing Integrates multiple authentication methods such as password and OTP, supports Radius and Tacacs+ protocols, and provides device access, fine-grained attribute, and command-line authorization; also has management log and protocol log auditing functions to ensure safe and compliant operations.

Mobile Authentication Security Assurance Provides an OTP APP adapted to Android, iOS, and HarmonyOS, supporting online and offline authentication. It ensures the security of mobile authentication terminals through high-intensity device fingerprinting and software security sandbox technology.

Scenarios

Radius Authentication and Authorization

Realizes network device authentication and authorization through the Radius protocol, applicable to network devices that support the Radius protocol.
Tacacs+ Authentication and Authorization

Realizes network device authentication and authorization through the Tacacs+ protocol, applicable to network devices that support the Tacacs+ protocol.
Network Device Group Management

Supports group management of network devices, enabling hierarchical management of administrators based on groups, and management of device authentication and authorization policies based on groups.

Features

Excellent Device Compatibility

Compatible with network devices from mainstream manufacturers through Radius and Tacacs+ authentication and authorization protocols, such as Huawei, H3C, Cisco, Sangfor, Hillstone Networks, DPtech, and Hongji.

Seamless Replacement of Foreign Competitors' Products

Seamlessly replaces Cisco ISE products with zero configuration changes to network devices.

Secure OTP Technology

Ensures OTP authentication security through mobile device fingerprints, security sandboxes, TOTP algorithms, and white-box algorithms.

Flexible Authentication Policies

Supports flexible authentication policies such as password, OTP, and password + OTP, set based on user and device dimensions.