Some corporate clients use their own proprietary protocols; others interoperate with two or more different IM services. If you're looking for a corporate client that will work with multiple IM networks, be sure to do your homework to determine which products the client you're considering will and won't interoperate with. Some public IM networks actively block unlicensed connections. For example, AOL is notorious for building technical walls to prevent third-party communications with its messaging network—frequent changes to AOL's IM network have prevented Jabber and other ICQ clients from connecting without regular interruptions. Clients that support encryption usually require the same client at both ends of the chat. Depending on the corporate client you choose, you might host your own IM server or gateway or use the vendor's hosting services.
The following selection of products offer reliable end-to-end corporate IM. The first three clients are from the largest public IM vendors, followed by some other vendor offerings. Although space restrictions prevent me from providing a lot of detail about each product, you can visit vendors' Web sites to learn more.
Enterprise AIM Services. Announced in May 2002, AOL's Enterprise AIM Services (http://www.aim.com/get_aim/enterprise/enterprise.adp) was among the earliest corporate versions of a personal IM client. When deployed with the AIM Enterprise Gateway, Enterprise AIM Services keeps internal traffic inside the network. The gateway, which starts at $34 per seat, lets network administrators control IM use by user and group and includes routing and auditing capabilities. Enterprise AIM Services lets you store content centrally and scan it by keyword, date, and contact name; AOL promises that in the near future you'll be able to encrypt traffic that leaves the local network if the receiver also uses Enterprise AIM Services. VeriSign will provide digital certificates for this product.
Yahoo! Messenger Enterprise Edition. Yahoo! Messenger Enterprise Edition (http://enterprise.yahoo.com/messenger) uses128-bit encryption and Secure Sockets Layer (SSL) for secure communications. The client can communicate with LDAP-enabled directories for user authentication. Yahoo! Messenger Enterprise Edition provides centralized client management and lets administrators force users to use antivirus software. Yahoo is targeting first quarter 2003 as a general release date; pricing wasn't available at press time.
Microsoft clients. Although Microsoft has had nearly a dozen chat offerings over the past decade, Windows Messenger and MSN Messenger put the company on the map in the IM market. Microsoft already has a corporate IM solution, Instant Messaging Client for Exchange 2000 Instant Messaging Service, that lets users chat locally or over the Internet. You can administer the client as part of Exchange. Microsoft Exchange 2000 Server's IM feature doesn't offer encrypted communications, however.
Currently scheduled for a first quarter 2003 release, Microsoft's next-generation IM platform, MSN Messenger Connect (http://www.microsoft.com/net/services/msn_messenger_connect.asp), will work with the Exchange 2000 IM client, Active Directory (AD), and Microsoft SQL Server databases. Although Microsoft hasn't provided many details, MSN Messenger Connect will offer most of the same features as the AOL and Yahoo! offerings but will also leverage Microsoft technologies, such as AD, SQL Server, and Exchange. The price should be about $24 annually per user, with volume discounts available.
Groove. Some messaging experts consider Groove Networks' Groove Workspace (http://www.groove.net) to be the perfect combination of email, IM, and collaboration tools. Creator Ray Ozzie won 65 million customers over to his earlier paradigm-creating software, Lotus Notes, and he expects to far exceed those numbers with Groove. Developers built security into Groove from the ground up: Shared communications use VPN channels by default, and the software authenticates users as well as encrypts message data on the network and on disk. Only authorized group members can view messages on the network, and only the data owner can view data on disk. Whereas most IM vendors' documentation contains only a few sentences about encryption, Groove Networks devotes 23 pages to the subject. If you need secure, well-thought-out messaging, you should take a look at Groove. Pricing starts at $49 per user with volume discounts available.
IBM Lotus Sametime 3. IBM claims that more than 7 million corporate users have adopted IBM Lotus Sametime 3 (http://www.sametime.com). Used with a Lotus Notes or browser-based client, Sametime provides all the features a company needs for IM, document collaboration, and Web conferencing. Sametime implements encrypted communications and password-protected private channels and lets you log messages to the desktop or to a central server. Pricing starts at $36 per user.
Novell GroupWise 6.5. Novell intends to put proprietary IM into the final release version of its GroupWise 6.5 email software (http://www.novell.com/products/groupwise). According to the vendor, GroupWise IM will contain most of the features typically available in corporate IM clients, including message logging, but won't have auditing or keyword search capabilities. Pricing was unavailable at press time.
Jabber. Jabber is an open-source XML-based IM protocol developed with an eye toward interoperability between diverse products such as AIM, ICQ, MSN Messenger, Yahoo! Messenger, SMTP, and Internet Relay Chat (IRC). Although Jabber-based clients are robust enough to stand alone as a private IM service, Jabber gateways allow interoperability with many public networks. The Jabber server doesn't directly support user authentication, but you can deploy open-source or commercial customized modules to support LDAP-compatible directories. Like most open-source products, Jabber-based clients don't have the rich feature sets of their commercial cousins, but they can support user authentication, encryption, and logging features with other open-source add-on products and a little elbow grease. At least half a dozen Windows-based Jabber clients support encrypted communications. For a list of Jabber clients, go to http://www.jabber.org/user/clientlist.php.
Trillian. Cerulean Studios' Trillian Pro (http://www.trillian.cc) uses a 128-bit Blowfish cipher with Diffie-Hellman key exchange to secure communications. Although Trillian Pro works with IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger traffic, it can encrypt only AIM and ICQ traffic. Considered one of the more feature-rich third-party clients, Trillian Pro's lengthy list of features includes skins and an actively supported API plug-in. Pricing is $25 per workstation.
e/pop. WiredRed Software's e/pop IM client (http://www.wiredred.com) comes in basic, professional, and Java versions. All versions are encryption-enabled, authenticate end users, and include centralized management and logging capabilities. The professional client also offers remote control and application sharing. e/pop 3.0 Professional Client starts at $199 for five users; e/pop Basic starts at $179 for five users.
Imici Business Messenger. Imici Business Messenger (Imici.BM—http://www.imici.com) supports AIM, ICQ, Yahoo! Messenger, and MSN Messenger from one interface. Imici uses the MD5 message digest algorithm for session authentication, RSA for peer encryption and symmetric key exchanges, and Blowfish for session encryption. Pricing is $250 annually for the license fee plus $2 per user per month. The company also sells Imici Enterprise Server and a software development kit (SDK) to companies that want to host their own customized IM services.
Bantu IM & Presence Platform. Bantu (http://corp.bantu.com) offers Bantu IM & Presence Platform, a Java-based client that works on Windows, Macintosh, Linux, and Sun Microsystems' Solaris. This client interoperates with AIM, MSN Messenger, and Yahoo! Messenger and offers logging, alarm triggers, and customized alerts. Bantu IM & Presence Platform uses a proprietary encryption routine and SSL to secure messages. Pricing is $25 per workstation per year.
Professional Online Desktop. Omnipod's Professional Online Desktop (POD—http://www.omnipod.com) offers typical corporate IM features secured by 168-bit Triple DES (3DES) SSL encryption. Because POD lets users import personal buddy lists from popular IM clients, it can ease a corporate IM implementation. Pricing starts at $15 per user per month, with volume discounts available.
For companies that aren't ready to invest in a premium corporate IM client or that must communicate with users who run only personal IM clients, dozens of third-party clients and utilities are available that can make personal IM clients more secure, although they don't provide other corporate IM features. Table 1 lists some of these offerings.
