Security: Network Access ControlThis newsletter is sponsored by Nevis NetworksNetwork World's Security: Network Access Control Newsletter, 08/21/07The side benefit of NAC capabilitiesBy Tim GreeneIdeally, NAC addresses machines connecting to networks via wired, wireless and remote access connections, but not all users need all three areas addressed. One user says he implemented NAC specifically to address remote users coming in over the corporate VPN. “We had no device that could check the status of devices that were plugged into the network,” he says. The main concern was that the remote devices in particular, which in many cases were not managed by the company, would introduce malware into the network. The business is relying more and more on employees that work from home and contractors hired for projects.
The company chose a product that gave it both pre-admission NAC endpoint checking as well as post-admission behavior monitoring. The behavior monitoring also came with the ability to enforce behavior that violates policies. While the endpoint checking alone doesn’t guarantee a machine is uninfected, it does reduce the chances that it is. A side benefit of the NAC capabilities was that the business now gets a better view of traffic on the network - who is accessing what resources and tying that to time and method of connection. One attractive feature of the gear he chose was that it didn’t require carving up the network into virtual LANs for every policy group. The NAC device itself enforces the policies. The user notes he found more than one vendor that met his NAC specifications, and he chose the one that was least expensive - something that no doubt won praise from the bean counters.
|
Contact the author: Tim Greene is a senior editor at Network World, covering network access control, virtual private networking gear, remote access, WAN acceleration and aspects of VoIP technology. You can reach him at tgreene@nww.com. This newsletter is sponsored by Nevis NetworksARCHIVEArchive of the Security: Network Access Control Newsletter. BONUS FEATUREIT PRODUCT RESEARCH AT YOUR FINGERTIPS Get detailed information on thousands of products, conduct side-by-side comparisons and read product test and review results with Network World’s IT Buyer’s Guides. Find the best solution faster than ever with over 100 distinct categories across the security, storage, management, wireless, infrastructure and convergence markets. Click here for details. PRINT SUBSCRIPTIONS AVAILABLE International subscribers, click here. SUBSCRIPTION SERVICESTo subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here. This message was sent to: networking.world@gmail.com. Please use this address when modifying your subscription. Advertising information: Write to Associate Publisher Online Susan Cardoza Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 Copyright Network World, Inc., 2007 |
No comments:
Post a Comment