Skip the navigation

What you need to know about NAC

How to choose the correct setup for your company

By Greg Schaffer
March 29, 2007 12:00 PM ET

Computerworld - In today's world of data theft, worm and virus threats, and the need to comply with federal mandates, incorporating network access control (NAC) technology into your network infrastructure isn't an option but rather a critical necessity.

However, NAC isn't easy to define. It encompasses a broad range of meanings and methodologies. This article aims to clarify the basic points of NAC to help answer the question of what NAC setup is correct for your particular environment.

NAC is a policy enforcer and, as such, is closely tied to a company's business processes. Many wireless hot spots at restaurants, for example, employ basic NAC systems that require users to accept the conditions of an acceptable use policy before they are allowed to access the network.

This simple form of NAC works in this case, because the restaurant is providing only one simple network service -- that is, Internet access -- as a value-added benefit of visiting the establishment. However, setup like that certainly wouldn't be acceptable for other environments, such as a hospital network.

In order to answer the question of what type of NAC approach is right for your network, two prerequisites must be satisfied. The first, rather obvious one is an understanding of the NAC offerings that are available, what they do, how they do it, and how they integrate into the network. The second requirement is the presence of a clear, enforceable corporate security and access policy. NAC systems don't create policies; they enforce them. Without such policies, general corporate access decisions become the sole responsibility of the IT department (and that's never a good practice).

Digging into NAC

Achieving network access generally involves passing one of three types of tests. The first, as in the previous example of a wireless hot spot, can be satisfied by simply requiring users to agree to an acceptable use policy before allowing them to connect to the network. User identity and machine status have no bearing on whether access is granted or not; there is but one door, and it's either open or closed.

The second type of test validates user identity, and the third validates machine posture. These two tests are rarely used to either completely deny access or allow total access, with nothing in between. When a test that validates a user's identity is used, different levels of user access may be granted based on type of user, with the extremes being complete access for administrators and use of a limited set of applications (for example, only http and https) for guest users.

Machine posture refers to the state of the computer as it relates to an established security policy. If the policy mandates that a Windows machine have up-to-date operating system patches, connectivity is restricted until the patch requirement has been met. By ensuring that the machine meets the requirements of the security policy, damage from worms and viruses can be drastically reduced.



Additional Resources
Forrester Consulting - Optimizing Users and Applications in a Mobile World
WHITE PAPER
Solving application issues over the WAN requires careful consideration. Based on their independent research, Forrester Consulting offers recommendations on how to tackle application performance issues, insufficient bandwidth and the inability to quickly restore users in a disaster.

Read now.

Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Networking White Papers
Digital Transformation: Creating New Business Models Where Digital Meets Physical
Individuals and businesses alike are embracing the digital revolution. Social networks and digital devices are being used to engage government, businesses and civil...
Make the Connection: Better Network Connectivity Drives Transformation
Network connectivity is more than just plumbing. Leading organizations today see high-performance network connectivity as a critical enabler of competitive advantage, and not...
Virtualizing Government Infrastructure
All server virtualization solutions are not created equal. The more-with-less agenda for government agencies is tailor-made for server virtualization, which is evolving into...
Moving Service Management to SaaS
Today, organizations can enjoy similarly substantial benefi ts by migrating their IT service management functions to a software-as-a-service model. This paper shows how...
Achieving 360 Degree Network Visibility with Nimsoft
360° network visibility is critical for ensuring continuous availability of networks, servers, and applications-anything less could
have costly bottom-line implications.
All Networking White Papers
Networking Webcasts
Optimizing Networks for the Cloud
Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
Unified Communications 101
What's the best way to implement a unified communications solution for your organization?
Try the OptiView® XG on your network - FREE
The OptiView® XG is the first dedicated tablet with automated network and application analysis -- fastest way to root cause. XG raises the...
Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
All Networking Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs