Network Access Control Netevents Debate Panel

1
Network Access Control Netevents Debate Panel

• Rick Moy, President
• NSS Labs

2
What is NAC?

• Network Access Control
• Network Admission Control
• Network Access Protection

3
Trying to solve

• Who can plug in/Guest access
• Security threats Unpatched/vulnerable/infected
  machines attaching to my network
• No baseline security configurations for clients
• Open access to network resources once youre
  plugged in
• Rogue Apps like P2P

4
Not just a product

• Technology that limits access to the network.
• Both Positive and Negative Enforcement applied
• Multiple approaches to achieve this technical
  goal
• clients
• Clientless (web browser downloads an ActiveX or
  Java Application similar to SSL VPN)

5
Questions

• What are the main use cases for NAC today? Guest
  access or establishing that endpoints meet a
  baseline profile? Other?
• From Blaster to Sasser to Confiker/Downadup,
  worms pose a serious challenge. How can NAC
  address this?
• What are the advantages of pure-play NAC
  offerings over integrated offerings from
  incumbent switch vendors?
• Interoperability. This is potentially a big
  hurdle for buyers. Do all versions of my
  switches work with the proposed NAC solution?
  How is this getting resolved for customers?
• How will NAC evolving throughout 2009?

6

• Questions?
• Rick Moy, President
• Email rmoy_at_sslabs.com
• Tel [phone]