Network infrastructure, technologies and security

July 2012 Infrastructure

Poorly configured and unprotected IP networks expose organisations to unnecessary security risks and present opportunities to those with malicious intent to misuse resources, gain unauthorised access to confidential data and introduce any number of viruses and spyware programs.

To ensure a safe and efficient network, businesses need to adopt a comprehensive approach to identifying, controlling and securing access to critical network communications and business services. Well architected network access control (NAC) solutions are able to decide whether a trusted user, a guest or a device can connect to a network and what they are authorised to do once they are connected.

Such a solution will evaluate each access request based on policy criteria such as device and user identity, business role, time of day, location and the health of the end system. Comprehensive NAC solutions employ a variety of assessment technologies, together with proactive and reactive policy enforcement to provide a solid pre-connect and post-connect end system security offering.

Today’s NAC solutions leverage a number of important functions, including authentication, assessment, authorisation and remediation, enabling IT organisations to best align NAC with business needs. These needs are increasingly related to the management and control of personally-owned devices such as tablets, laptop PCs and smartphones linking to the corporate network.

With the BYOD (bring your own device) phenomenon gaining momentum, many organisations are now deeply concerned about these devices violating long-held operational rules when connected to the network. The more vigilant companies have instructed their IT departments to introduce technologies to formalise the linking of BYODs to the corporate network.

These solutions must be capable of increasing the levels of intelligence of the corporate network infrastructure to the point where it is able to quickly and easily determine which end-users and what mobile devices are on the network – and whether their users are in compliance with established policies both prior to connection, and after connection.

Enterprise-wide visibility into the current status of all network devices (including BYODs), the end-points and end-users is required, as is a common management view of relevant information and events in context, together with the ability to automatically enforce predetermined policies. The challenge facing organisations today is to accept that new-generation technology is fundamental to network authentication and identity-based systems.

To achieve peace of mind organisations must deal with vendors capable of not only recognising the business advantages presented by increasingly sophisticated BYODs, but able to provide NAC through policies that include unified protection for the wired and wireless edge of heterogeneous infrastructures.

This functionality must be deeply integrated into the networking workflows and embrace appropriate policy options for control, virtualisation flexibility, as well as ‘anytime, anywhere’ management.

Already, many opportunities have been identified for the further development of NAC solutions and technologies. In fact, vendors are moving beyond NAC to deliver ‘application services engines’ that provide security, control and manageability of all wired and wireless end systems including BYODs. Not only do these solutions include more deployment modes, deeper integration with IT and security management systems, and enhanced application control to handle device proliferation, they provide better device-type granularity allowing different levels of network access to be granted to managed and non-managed BYODs.

With IT departments being called upon to track, manage and secure a broad range of BYODs on all the major mobile operating platforms, these application services engines provide solutions capable of the automatic discovery and provisioning of users and their devices based on a broadening range of criteria, including access location and operating system used.

This data will facilitate context-based management; enabling users to leverage only the most relevant network and corporate resources while giving IT managers greater visibility of the activities of employees, guests and their devices. While these new-generation solutions already alert managers should any BYOD be inappropriately used, it will not be long before they will be able to remotely ‘wipe’ any device clean of sensitive corporate data if it falls into the wrong hands.

Martin May
Martin May

For more information contact Enterasys Networks, +27 (0)11 234 2230, [email protected], www.enterasys.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

iOCO collaboration protection secures Office 365
Information Security Infrastructure
The cloud, in general, and Office 365, in particular, have played a significant role in enabling collaboration, but it has also created a security headache as organisations store valuable information on the platform.

Read more...
Smart mining operations management
Mining (Industry) Infrastructure IoT & Automation
In his presentation at the recent MESA Africa conference, Neels van der Walt, Business Development Manager at Iritron, revealed the all-encompassing concept of SMOM (Smart Mining Operations Management) and why it is inextricably linked to the future of worldwide mining operations.

Read more...
Do you need a virtual CIO?
Editor's Choice News & Events Infrastructure
If you have a CIO, rest assured that your competitors have noticed and will come knocking on their door sooner or later. A Virtual CIO service is a compelling solution for businesses navigating tough economic conditions.

Read more...
The TCO of cloud surveillance
DeepAlert Verifier Technews Publishing Surveillance Infrastructure
SMART Security Solutions asked two successful, home-grown cloud surveillance operators for their take on the benefits of cloud surveillance to the local market. Does cloud do everything, or are there areas where onsite solutions are preferable?

Read more...
Cyber resilience – protect, defend, recover
Infrastructure
The challenge with AI is that threats are getting harder to detect. As a result, plans in 2024 are not just about detection and prevention, but about recovery.

Read more...
Powering business resilience and field operations
Infrastructure Products & Solutions
[Sponsored] The Anker 757 Portable Power Station emerges as a strategic asset for businesses looking to overcome power instability and the demand for operational efficiency in remote and field-based environments.

Read more...
Top bets for backup and business continuity
Infrastructure
Become your organisation’s data pioneer and spearhead data governance and protection of critical data. Challenge why best practices are not adopted or in place, while highlighting the inherent risks this poses.

Read more...
Next-gen solar-powered switches
Infrastructure
Duxbury Networking has introduced its range of solar unmanaged switches, which are ideal for any environment requiring reliable Power-over-Ethernet (PoE) capabilities, such as IP phones, cameras, and access points.

Read more...
Navigating South Africa's cybersecurity regulations
Sophos Information Security Infrastructure
[Sponsored] Data privacy and compliance are not just buzzwords; they are essential components of a robust cybersecurity strategy that cannot be ignored. Understanding and adhering to local data protection laws and regulations becomes paramount.

Read more...
Creating a cybersecurity strategy in a world where threats never sleep
Information Security Infrastructure
[Sponsored Content] The boom of Internet of Things (IoT) technology and the chaos that surrounded the sudden shift to work-from-home models in 2020 kick-started the age of cybercrime. In that period, incidents rose by 600%, affecting every industry and showing no signs of slowing down.

Read more...