Microsoft Reels In Whale As A SSL VPN Provider

Whale Communications is the only SSL VPN player that has based its product on the Windows platform vs. the majority of other providers in this space using open-source or Linux technologies.

Whale intends to incorporate some functionality found in ISA Server 2000 into their product, said Mike Chan, technical product manager, Security Business Unit, at Microsoft, Redmond, Wash.

Whale Communications is also working with several Microsoft divisions including the Security Business Unit, and the Exchange and Terminal Services practices.

"We needed tools and a platform that were as robust as possible so that as customers brought very unique application environments to the table, we could respond with a user interface and a set of tools that met their needs. The Linux environment has not evolved to this area yet," said Gamiel Gran, vice president of business development and strategic alliances at Whale Communications, Fort Lee, N.J.

"It started out with customers saying we just need protection for remote e-mail users and has expanded to a laundry list of applications like SAP, BEA, Lawson and so on," he added.

Robert Masse, president of Montreal-based security and integration firm GoSecure, said the fact that Whale Communications' solution is Windows-based had little to do with his choice to go with e-Gap.

"I used to be in charge of ethical hacking for KPMG, and I could never hack into Whale's product," said Masse. "We tell our customers to have a blast, try to crack into these systems, and not one has been able to."

Whale Communications is pursuing partnerships with a variety of Microsoft partners. In addition to recommending e-Gap to its customers, Microsoft is bringing some partners up to speed on the offering, Chan said.

Microsoft's ISA 2004 solution addresses a subset of customers' SSL VPN needs in areas such as Web publishing and Outlook Web access. Customers, however, were demanding a more complete solution, Chan said.

"Whale's product fills a void that ISA doesn't address, such as Terminal Services," Chan said.