Cram Session: Network Access Control

Hands-on Reviews

We put NAC tools to the test in our labs.

What can NAC do for you now?
Test of 30 products shows benefits, limitations of existing Cisco- and standards-based NAC schemes

NAC authentication with XP clients is a snap
Complications arise when dealing with agentless devices and guest access

NAC enforcement tools fall short
In complex networks, proprietary schemes are required

Cisco, TCG deliver on basic end point security
Setup can be difficult, but well worth the effort

NAC management can be a headache
Policy servers need to cross security, network and desktop boundaries

Aventail and F5 extend security reach to NAC
SSL VPN appliances mature from devices offering basic application support to enterprise-ready security jacks-of-all-trades.

ConSentry edges out Nevis in in-line NAC appliance test
Both devices offer increased access control with minimal impact on existing networks.

A test of NAC appliance performance:
For ConSentry and Nevis boxes, it’s a tradeoff between speed and security.

NAC appliances reveal who's rapping at your network door
NAC boxes from Caymas, Lockdown, Nevis, and Vernier separate valid users from troublesome intruders

ESP 2.0 boosts your network perception
System admins used to only dream about knowing exactly which devices were on their network and controlling what resources those devices were accessing. ESP (Elemental Security Platform) 2.0 is one of the more mature products aimed at realizing that dream.

Check Point and Sygate corral end points
At their core, Check Point Integrity and Sygate Enterprise Protection are effectively policy-based firewalls. That's the cake. The icing is their capability to monitor other applications for compliance with configuration requirements and send errant machines to quarantine until they can be updated with the latest anti-virus definitions, Windows patches, or other necessities.

ConSentry keeps a watchful eye on user
It is no longer enough to secure just the network edge against unknown attackers trying to break in; traffic inside the network must come under increased scrutiny, as well, to ensure that users are following established policy or meeting regulatory requirements.

Back to top

Submit A StoryClick here to submit a story for consideration by Cram Session Editor, stories@cramsessionnac.com