NAC Director™ Point Solutions
|
|
Many
organizations understand the power of NAC and are looking for
an effective way to introduce its benefits into their organizations.
New NAC Director point solutions, subsets of our comprehensive
NAC capabilities, each solve one important identity issue,
are easily added to the network and provide immediate ROI.
Guest/Contractor Services
|
Guest/Contractor Services, or GCS, is all
about unmanaged users with unmanaged devices – guests,
contractors, and others. The services part
is enabling enterprises to allow network access for unmanaged
users without sacrificing security of their internal
network resources and users. It allows access privileges
for guests and contractors to be customized based on
who they are and their role or relationship to the business
|
.
|
It also allows
IT to delegate routine tasks to non-technical employees – or sponsors – in
other functional groups. Sponsors are able to register guest
users and set up their network access without having to get
IT directly involved. This not only speeds up the process for
sponsors and guests, but also takes a burden off of IT staff.
GCS automates the process of registering
guest users on the network and enabling role-based access to
appropriate network resources. GCS helps IT staff, internal
sponsors, and guest users to be more productive and keeps the
enterprise network secure.
User Visibility and Control
|
User Visibility and Control, or UVC, is all about users.
The visibility part is knowing who is on
your network at any given time, as well as who is trying
or has tried to get onto your network. The control part
is being able to decide what network resources users
can or cannot access based on who they are.
UVC automates the process of identifying all users
and either allowing access to appropriate network resources
(for authorized users) or blocking access (for unauthorized
users)
|
|
Device Profile and Control
|
Device Profile and Control, or DPC, is
all about endpoint devices. The profile part
is being able to positively identify devices attaching
to your network and to classify them by type – such
as a printer, an IP phone, or a medical imaging device.
The control part is being able to decide
what devices are allowed on the network and what resources
they can or cannot access based on the type of device.
|
|
DPC automates the process of identifying and profiling
all endpoint devices and either allowing access to appropriate
network resources (for authorized devices) or blocking access
(for unauthorized devices).
Behavior Monitoring and Control
|
Behavior Monitoring and Control,
or BMC, is all about behavior of users
and devices on the network. The monitoring part
is about watching network activity using third-party
technologies like intrusion detection and prevention
systems (IDS/IPS), traffic monitors (NetFlow), packet
shapers (Packeteer), and others. The control part
is being able to identify users and devices responsible
for inappropriate or threatening behavior and to be able
to stop the behavior at the point where it starts on
the network.
|
|
BMC automates the process of identifying
users and/or devices responsible for inappropriate or threatening
behavior and mitigating the issue by modifying the offender’s network access.
|