Network Access Control Technologies and Symantec Compliance on Contact
NAC solutions require multiple enforcement methods and policy flexibility to cover the entire enterprise network. As an innovator in NAC solutions, Symantec provides the most comprehensive and flexible set of options for deploying NAC to best fit your enterprise needs. Read this paper to learn more about the theory behind Symantec’s technology.
Click here to download PDF

The Essential Elements of Comprehensive Endpoint Security
Description: For today’s computing environments, there is little question that endpoint security is a required component of an overall enterprise security strategy. Read this paper is to clarify the various aspects of the endpoint security problem and to identify the functional requirements of a comprehensive endpoint security solution.
Click here to download PDF

Internet Security Threat Report
The Highlights of this volume reveals the security threat environment continues to be populated by lower-profile, targeted attacks as cyber criminals identify new ways to steal information or provide remote access to user systems. This report offers analysis and discussion of threat activity, including: Internet attacks, vulnerabilities, malicious code, phishing, spam, security risks, and future trends.
Click here to download PDF

Extreme: Switch upgrade foils NAC-workaround exploit

Extreme Networks says it has switch software that stops a simple, yet dangerous hack used to surmount many common network access technologies used on LANs.

The vendor’s updated switch operating system — ExtremeXOS —includes a feature that stops malicious users from configuring a PC or laptop with a static IP address in order to circumvent network access control technology installed to protect an enterprise network, Extreme says.

Many NAC technology products operate this way: users gain access to the LAN by authenticating to the network at Layer 2, using the 802.1X protocol. If authentication fails, the users connection are routed to a secure virtual LAN segment, which offers limited network access. (Users may also get an opportunity to upgrade antivirus or PC operating system patches, if a user’s access was denied because these files were out of date.)

Users could get around this by configuring their machines with a static IP addresses in the IP address range used by the company. Extreme says its ExtremeXOS software is able to identify IP addresses on the network that were not dispensed by a legitimate enterprise DHCP server and shut down those connections.

ExtremeXOS operating system works on Extreme’s BlackDiamond 12K core switches, and its Summit X450 LAN edge/aggregation layer switches. ExtremeXOS 11.6 is free to Extreme switch customers with updated support contracts, the vendor says.

Back to top

Click here to submit a story for consideration by Cram Session Editor, stories@cramsessionnac.com