Network Admission Control

Network Admission Control (NAC) refers to Cisco's version of network access control, which restricts access to the network based on identity or security posture. When a network device (switch, router, wireless access point, DHCP server, etc.) is configured for NAC, it can force user or machine authentication prior to granting access to the network. In addition, guest access can be granted to a quarantine area for remediation of any problems that may have caused authentication failure. This is enforced through an inline custom network device, changes to an existing switch or router, or a restricted DHCP class. A typical (non-free) WiFi connection is a form of NAC. The user must present some sort of credentials (or a credit card) before being granted access to the network.

In its initial phase, the Cisco Network Admission Control (NAC) functionality enables Cisco routers to enforce access privileges when an endpoint attempts to connect to a network. This access decision can be on the basis of information about the endpoint device, such as its current antivirus state. The antivirus state includes information such as version of antivirus software, virus definitions, and version of scan engine.

Network admission control systems allow noncompliant devices to be denied access, placed in a quarantined area, or given restricted access to computing resources, thus keeping insecure nodes from infecting the network.

The key component of the Cisco Network Admission Control program is the Cisco Trust Agent, which resides on an endpoint system and communicates with Cisco routers on the network. The Cisco Trust Agent collects security state information, such as what antivirus software is being used, and communicates this information to Cisco routers. The information is then relayed to a Cisco Secure Access Control Server (ACS) where access control decisions are made. The ACS directs the Cisco router to perform enforcement against the endpoint.

This Cisco product has been marked End of Life since November 30, 2011,[1] which is Cisco's terminology for a product that is no longer developed or supported.

Posture assessment

Besides user authentication, authorization in NAC can be based upon compliance checking. This posture assessment is the evaluation of system security based on the applications and settings that a particular system is using. These might include Windows registry settings or the presence of security agents such as anti-virus or personal firewall. NAC products differ in their checking mechanisms:

Agent-less posture assessment

Most NAC vendors require the 802.1X supplicant (client or agent) to be installed. Some, including Hexis' NetBeat NAC,[2] Trustwave, and Enterasys [3][4] offer an agent-less posture checking. This is designed to handle the "Bring Your Own Device" or "BYOD" scenario to:

  • Detect and fingerprint all network attached devices, whether wired or wireless
  • Determine if these devices have common vulnerabilities and exposures (aka "CVEs")
  • Quarantine rogue devices as well as those infected with new malware

The agent-less approach works heterogeneously across almost all network environments and with all network device types.

See also

References

  1. ^ "Cisco's End of Life"
  2. ^ "SC Magazine Readers Trust Awards"
  3. ^ "Enterasys Review"
  4. ^ "Trustwave Datasheet"

Read other articles:

Efek Tyndall

artikel ini perlu dirapikan agar memenuhi standar Wikipedia. Tidak ada alasan yang diberikan. Silakan kembangkan artikel ini semampu Anda. Merapikan artikel dapat dilakukan dengan wikifikasi atau membagi artikel ke paragraf-paragraf. Jika sudah dirapikan, silakan hapus templat ini. (Pelajari cara dan kapan saatnya untuk menghapus pesan templat ini) Efek Tyndall Efek Tyndall adalah gejala penghamburan berkas sinar (cahaya) oleh partikel-partikel koloid. Hal ini disebabkan karena ukuran molekul...

 

Calycomyza flavinotum

Calycomyza flavinotum Klasifikasi ilmiah Kerajaan: Animalia Filum: Arthropoda Kelas: Insecta Ordo: Diptera Famili: Agromyzidae Genus: Calycomyza Spesies: Calycomyza flavinotum Calycomyza flavinotum adalah spesies lalat yang berasal dari genus Calycomyza dan famili Agromyzidae. Lalat ini juga merupakan bagian dari ordo Diptera, kelas Insecta, filum Arthropoda, dan kingdom Animalia. Larva Larva lalat ini herbivora dan biasanya memakan daun. Referensi Bisby F.A., Roskov Y.R., Orrell T.M., Nicol...

 

العلاقات الروسية الكورية الجنوبية

العلاقات الروسية الكورية الجنوبية روسيا كوريا الجنوبية   روسيا   كوريا الجنوبية تعديل مصدري - تعديل   تشير العلاقات الروسية الكورية الجنوبية (باللغة الروسية: Российско-южнокорейские отношения، Rossiisko-yuzhnokoreiskie otnosheniya، باللغة الكورية: 한러 관계، hanreo gwangye) إلى العلا...

Let Me Live (Rudimental and Major Lazer song)

This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.Find sources: Let Me Live Rudimental and Major Lazer song – news · newspapers · books · scholar · JSTOR (June 2018) (Learn how and when to remove this template message) 2018 single by Rudimental and Major Lazer featuring Anne-Marie and Mr EaziLet Me LiveSingle by Rudime...

 

Hidangan Prancis

Coq au vin Escargot Masakan Prancis (Cuisine française) adalah jenis masakan yang berasal dari negara Prancis dan berbagai negara lain yang mendapat pengaruh budaya Prancis.[1][2] Masakan Prancis yang terus berevolusi bersamaan dengan perubahan sosial dan politik dipandang sebagai jenis kuliner yang elegan, penuh warna, porsi yang sedikit, kadang-kadang kedaerahan.[1] Selain itu, juga telah dikenal akan kelezatannya dan merupakan golongan kuliner yang rumit dan menant...

 

Blacherne

Le Blacherne occupavano la parte nord-ovest della città di Costantinopoli Le Blacherne (in greco bizantino: Βλαχέρναι; in latino: Blachernae) erano uno dei quartieri di Costantinopoli, capitale dell'Impero bizantino. Situate nella parte nord-ovest della città e sviluppatesi attorno a una fonte d'acqua ritenuta sacra, ospitavano diversi importanti edifici, tra cui la chiesa di Santa Maria delle Blacherne e il palazzo delle Blacherne. Indice 1 Etimologia 2 Periodo bizantino 3 Oggi 4 ...

土库曼斯坦总统

土库曼斯坦总统土库曼斯坦国徽土库曼斯坦总统旗現任谢尔达尔·别尔德穆哈梅多夫自2022年3月19日官邸阿什哈巴德总统府（Oguzkhan Presidential Palace）機關所在地阿什哈巴德任命者直接选举任期7年，可连选连任首任萨帕尔穆拉特·尼亚佐夫设立1991年10月27日 土库曼斯坦土库曼斯坦政府与政治 国家政府 土库曼斯坦宪法 国旗 国徽 国歌 立法機關（英语：National Council of Turkmenistan） ...

 

أندريا غيز

أندريا غيز   معلومات شخصية اسم الولادة (بالإنجليزية: Andrea Mia Ghez)‏  الميلاد 16 يونيو 1965 (59 سنة)  نيويورك  مواطنة الولايات المتحدة  عضوة في الأكاديمية الوطنية للعلوم[1]،  والأكاديمية الأمريكية للفنون والعلوم[2]  الحياة العملية المدرسة الأم معهد كاليفورن...

 

Serial port

Communication interface transmitting information sequentially A male D-subminiature connector used for a serial port on an IBM PC compatible computer along with the serial port symbol On computers, a serial port is a serial communication interface through which information transfers in or out sequentially one bit at a time.[1] This is in contrast to a parallel port, which communicates multiple bits simultaneously in parallel. Throughout most of the history of personal computers, data ...

Interkosmos

Soviet international spaceflight program For the 2006 film, see Interkosmos (film). Interkosmos programИнтеркосмос Космическая ПрограммаInterkosmos Kosmicheskaya ProgrammaInterkosmos patchProgram overviewCountry  Soviet Union (1967-1991)  Russia (1992-1994) Organization Soviet space program (1967-1991) Roscosmos (1992-1994) Purposecrewed and uncrewed space mission for Soviet alliesStatusCompletedProgram historyDuration1967–1994First flightVertikal 1N...

 

Songs from the South: 1985–2019

2019 greatest hits album by Paul KellySongs from the South: 1985–2019Greatest hits album by Paul KellyReleased15 November 2019Recorded1985–2019Length2:38:00LabelGawd AggieEMIPaul Kelly chronology Thirteen Ways to Look at Birds(2019) Songs from the South: 1985–2019(2019) Forty Days(2020) Songs from the South: 1985–2019 is a career-spanning greatest hits album by Australian singer-songwriter Paul Kelly. It was released on 15 November 2019 through Gawd Aggie and EMI Music Austra...

 

Charitable incorporated organisation

This article is part of a series onCorporate law By jurisdiction Anguilla Australia BVI Canada Cayman Islands India South Africa UK United States Vietnam European Union France Germany General corporate forms Company Conglomerate Cooperative Corporation Holding company Joint-stock Partnership General Limited Limited liability Private limited Shell corporation Shelf corporation Sole proprietorship Corporate formsby jurisdiction European Union Societas (SE) Societas cooperativa (SCE) Socie...

Nicolas Dipre

Nicolas Dipre, Presentazione di Maria al Tempio, 1500 circa, Museo del Louvre, Parigi Nicolas Dipre oppure Nicolas d'Amiens o anche Nicolas d'Ypres (Parigi, 1460 circa – Parigi, 1532) è stato un pittore francese. Indice 1 Biografia 2 Galleria d'immagini 3 Opere principali 4 Note 5 Bibliografia 6 Altri progetti Biografia Detto anche di Amiens, in quanto la sua famiglia di artisti si trasferì ad Avignone, dove Dipre fu attivo dal 1495 al 1532.[1] Il padre Colin Amiens, chiamato anch...

 

Mount Cook Aerodrome

This article includes a list of general references, but it lacks sufficient corresponding inline citations. Please help to improve this article by introducing more precise citations. (January 2023) (Learn how and when to remove this message) Airport in Mount Cook Village, New ZealandMount Cook AirportSki-planes at Mount Cook, 1977IATA: MONICAO: NZMCSummaryOperatorAoraki Mount Cook Airport LtdLocationMount Cook Village, New ZealandElevation AMSL2,153 ft / 656 mCoordinates43°46...

 

Three Fires Council

Boy Scouts of America council For other uses, see Council of Three Fires. Three Fires CouncilOwnerBoy Scouts of AmericaCountryUnited States Websitewww.threefirescouncil.org Scouting portal The Three Fires Council of the Boy Scouts of America is located in Illinois. In 1992, it was formed from the merger of Two Rivers Council and DuPage Area Council (named for Dupage County); it was briefly called Two Rivers-DuPage Area Council. Its council service center is located in St. Charles, Illino...

Ԃ

Chữ Kirin Komi DjeHệ chữ KirinMẫu tự SlavАБВГҐДЂЃЕЀЁЄЖЗЗ́ЅИЍІЇЙЈКЛЉМНЊОПРСС́ТЋЌУЎҮФХЦЧЏШЩЪЫЬЭЮЯMẫu tự ngôn ngữ phi SlavӐА̄А̊А̃ӒӒ̄ӘӘ́Ә̃ӚӔҒГ̧Г̑Г̄ҔӺӶԀԂꚂꚀꚈԪԬӖЕ̄Е̃Ё̄Є̈ӁҖꚄӜԄҘӞԐԐ̈ӠԆӢИ̃ҊӤҚӃҠҞҜԞԚӅԮԒԠԈԔӍӉҢԨӇҤԢԊО̆О̃О̄ӦӨӨ̄ӪҨԤҦР̌ҎԖҪԌꚐҬꚊꚌԎУ̃ӮӰӰ́ӲҮҮ́ҰХ̑ҲӼӾҺҺ̈ԦꚔҴꚎҶӴӋҸꚒꚖꚆҼҾЫ̆Ы̄ӸҌЭ̆Э�...

 

Abdulsalami Abubakar

Abdulsalami Abubakar Abdulsalami AbubakarAbdulsalami Abubakar 11.º Presidente da Nigéria Período 8 de junho de 1998a 28 de maio de 1999 Antecessor(a) Sani Abacha Sucessor(a) Olusegun Obasanjo Ministro da Defesa da Nigéria Período 21 de dezembro de 1997a 8 de junho de 1998 Antecessor(a) Sani Abacha Sucessor(a) Al-Amin Daggash Dados pessoais Nascimento 13 de junho de 1942 (82 anos) Kano, Nigéria colonial Primeira-dama Fati Lami Abubakar Religião Islamismo Profissão Militar e p...

 

Dialetto arianese

ArianeseParlato inAriano Irpino( Italia) TassonomiaFilogenesiLingue indoeuropee Lingue italiche  Lingue romanze   Lingue italo-romanze    Dialetti italo-meridionali     Dialetti campani      Dialetti irpini       Dialetto arianese Estratto in linguaTutti li cristiani nàscinu libbri e ttal'e qquali pi ndinità e ddiritti. Tutti quanti tiéninu li si�...

Discussion utilisateur:O Kolymbitès

Bas de la page καλώς ορίσατε ! Bienvenue sur ma page de discussion. Peut-être venez-vous à propos d'une page que j'aurais supprimée. Avez-vous vérifié sur votre propre page de discussion que les choses ne vous ont pas déjà été expliquées ? Sinon, êtes-vous sûr d'avoir lu les critères d'admissibilité des articles ? Peut-être avez-vous copié du texte qui n'était pas libre de droits : même si vous êtes l'auteur de ce texte, il n'est pas libre de droits tant que...

 

河内方

河内方（かわちがた）とは、鎌倉時代に歌壇や源氏学（源氏物語研究）の世界で大きな影響力を持った一派・一族である。 概要 この一派は、河内国を中心に活動したというわけではないが、始祖にあたる源光行とその子源親行のいずれもが河内守の地位にあったことから河内方と呼ばれる[1]。 源光行の時代には鎌倉と京都を行き来しており、後に鎌倉を中心に活...