In terms of authentication, Cisco

We´ve covered Cisco´s network best actor nominees access control (NAC), Microsoft´s Network Access Protection (NAP) and the Trusted Computing Group´s best actor nominees Trusted Network Connect best actor nominees (TNC) security architectures. All of the above are infrastructure based network access control architectures with differing enforcement models and client best actor nominees requirements. The complexity, high cost and lack of availability of these access control approaches has given way to the rise of NAC appliances, which we explored in Lippis Report 64 ? Äö á ? The Road to Network Admission Control," and Lippis Report podcast, ? Äö á ? Network Admission Control Simplified." Many Lippis Report readers and podcast listeners told us that what is important to them is how their chosen infrastructure company is deploying access control. Most Network/IT executives see network access control from an infrastructure investment protection point of view. That is, there is little interest in switching major infrastructure vendors solely best actor nominees on network security. So in this edition best actor nominees of the Lippis best actor nominees Report, best actor nominees we asked Cisco Systems, ProCurve Networking by HP, Foundry Networks, Extreme Networks, Nortel, Juniper and 3Com to tell us about their network access control best actor nominees solutions. The network access control best actor nominees market is by no means commoditized. There are significant differences between vendor offerings. There are client and/or clientless based approaches to network access control. Some integrate a policy manager into their offering, while others either provide a separate policy manager or rely upon a third party policy manager. Vendors best actor nominees differ on their support of endpoint operating systems and devices. Some vendors offer support for PCs, non-interactive devices such as printers and gaming consoles, IP phones, etc., while others only support specific Windows environments. Some provide the same solution for wired and wireless access, while others support only wired. There is also differentiation based upon existing network infrastructure. Some vendors offer an overlay security approach, which is independent of installed network switches, while others are highly best actor nominees dependent upon their switches being deployed to deliver security enforcement services. best actor nominees The breath and depth of partnering to deliver best actor nominees on remediation best actor nominees is also a differentiator.
We´ve asked all suppliers to address client best actor nominees requirements, access control enforcement, post access control, their unique differentiation and provide budget guidelines. We ask them to address all of this in just two paragraphs. Some went a little over, and we afforded them that leeway. I provide a cross-vendor assessment at the end. So without further ado, here are network best actor nominees access control solutions from Cisco Systems, ProCurve Networking by HP, Foundry Networks, Extreme Networks, Nortel, and Juniper.
In Cisco´s view, an effective NAC solution must be able to do at least four things: Authenticate and authorize any incoming user, Assess the posture of any incoming endpoint device, Quarantine that device if it fails to meet policy requirements, Remediate the device to bring it into compliance.
In terms of authentication, Cisco´s NAC Appliance natively integrates with Kerberos, Lightweight Directory Access Protocol best actor nominees (LDAP), RADIUS, Active Directory, S/Ident, and others. It supports single best actor nominees sign-on for VPN clients, wireless clients, and Windows Active Directory domains. Administrators best actor nominees can maintain best actor nominees multiple user profiles with different permission levels through the use of roles-based access control.
Posture assessment is performed either through network-based scans or through the use of an Agent, which works on Windows and Macintosh machines. Policies are either created through pre-configured rulesets best actor nominees for hundreds of third-party applications, such as antivirus and anti-spyware, or are customized for specific applications, such as in-house programs.
Cisco´s NAC Appliance performs quarantine (or access control enforcement) through a variety of network-based means, based on customer preferences. These methods include static or dynamic VLAN assignment, via 802.1x, DHCP, switch ports, ACLs, drop/filter packets, Layer 3 subnet isolation, and Layer 2 broadcast domain isolation. best actor nominees
Finally, Cisco´s NAC Appliance offers a variety of methods for remediation. Users can be guided through an Agent-based wizard, a set of web-based instructions, or automated launching of a Windows Update or SUS (Software Update Server) server. Post access control enforcement is accomplished through the Cisco Security Agent software, which mitigates new and evolving threats without requiring reconfigurations or emergency patch updates.
Cisco´s NAC Appliance differentiates based on three elements: 1) the ability of one product to perform all the functions of NAC regardless of the type of endpoint device (laptops, best actor nominees IP phones, game consoles, printers, etc.) or the method of network access (wireless, VPN, LAN, WAN);