Rants
Questions
Soapbox
Best Practices
Apply today for a FREE subscription to CIO Magazine!
Thu, May 22, 2008 9:12 EDT
|
Posted by: Simon Ford in Best Practices Topic: Architecture
Current Rating: |
How do we find the bottom of the network security black hole? We’ve all thrown money and resources into our security operations to realize that our best efforts are only as good as the weakest point. As the number of systems in use increases, the bigger the problem and the greater the hassle. Is there a way out, or is this a life we need to get used to? I believe that the way out starts with the adoption of a holistic network access control (NAC) methodology.
Enterprises must consider the following components when looking to reduce the burdens of complex, network environments:
• Central Management – Secure communications technology must be easy-to-use and simple to operate. With a single point of administration, only one user interface and one console are needed to manage mass-rollouts.
• Network Access Control – Endpoint policy enforcement enables enterprises to specify access parameters to the network system, forcing users without valid device configurations into a quarantine zone.
• IPSec and SSL Hybrid Support – Regardless of which VPN gateway is applied, a central remote station is able to control both worlds. The simultaneous support of IPSec and SSL protocols guarantees secure company communications in every environment.
• Open Standard Interface – The network access control solution supports all relevant operating systems and VPN gateways, and an open standard interface reduces organizations’ administrative burdens as well as overhead costs.
• Personal Firewall – An integrated, dynamic personal firewall with friendly net detection automatically recognizes safe and unsafe networks and regulates activity on these networks.
Additional essential NAC elements include strong authentication, compliance, integrated dialers, automated user access, user permissions, IT integration and long-term development.
With these security features, enterprises can lay the foundation for a more secure network, foster maximum productivity across a distributed network and streamline central management policies, while meeting compliance mandates. A holistic NAC approach will enable organizations to not only address their pain points but also to reduce the overall cost of security implementations without the management headaches.