Network infrastructure, technologies and security

July 2012 Infrastructure

Poorly configured and unprotected IP networks expose organisations to unnecessary security risks and present opportunities to those with malicious intent to misuse resources, gain unauthorised access to confidential data and introduce any number of viruses and spyware programs.

To ensure a safe and efficient network, businesses need to adopt a comprehensive approach to identifying, controlling and securing access to critical network communications and business services. Well architected network access control (NAC) solutions are able to decide whether a trusted user, a guest or a device can connect to a network and what they are authorised to do once they are connected.

Such a solution will evaluate each access request based on policy criteria such as device and user identity, business role, time of day, location and the health of the end system. Comprehensive NAC solutions employ a variety of assessment technologies, together with proactive and reactive policy enforcement to provide a solid pre-connect and post-connect end system security offering.

Today’s NAC solutions leverage a number of important functions, including authentication, assessment, authorisation and remediation, enabling IT organisations to best align NAC with business needs. These needs are increasingly related to the management and control of personally-owned devices such as tablets, laptop PCs and smartphones linking to the corporate network.

With the BYOD (bring your own device) phenomenon gaining momentum, many organisations are now deeply concerned about these devices violating long-held operational rules when connected to the network. The more vigilant companies have instructed their IT departments to introduce technologies to formalise the linking of BYODs to the corporate network.

These solutions must be capable of increasing the levels of intelligence of the corporate network infrastructure to the point where it is able to quickly and easily determine which end-users and what mobile devices are on the network – and whether their users are in compliance with established policies both prior to connection, and after connection.

Enterprise-wide visibility into the current status of all network devices (including BYODs), the end-points and end-users is required, as is a common management view of relevant information and events in context, together with the ability to automatically enforce predetermined policies. The challenge facing organisations today is to accept that new-generation technology is fundamental to network authentication and identity-based systems.

To achieve peace of mind organisations must deal with vendors capable of not only recognising the business advantages presented by increasingly sophisticated BYODs, but able to provide NAC through policies that include unified protection for the wired and wireless edge of heterogeneous infrastructures.

This functionality must be deeply integrated into the networking workflows and embrace appropriate policy options for control, virtualisation flexibility, as well as ‘anytime, anywhere’ management.

Already, many opportunities have been identified for the further development of NAC solutions and technologies. In fact, vendors are moving beyond NAC to deliver ‘application services engines’ that provide security, control and manageability of all wired and wireless end systems including BYODs. Not only do these solutions include more deployment modes, deeper integration with IT and security management systems, and enhanced application control to handle device proliferation, they provide better device-type granularity allowing different levels of network access to be granted to managed and non-managed BYODs.

With IT departments being called upon to track, manage and secure a broad range of BYODs on all the major mobile operating platforms, these application services engines provide solutions capable of the automatic discovery and provisioning of users and their devices based on a broadening range of criteria, including access location and operating system used.

This data will facilitate context-based management; enabling users to leverage only the most relevant network and corporate resources while giving IT managers greater visibility of the activities of employees, guests and their devices. While these new-generation solutions already alert managers should any BYOD be inappropriately used, it will not be long before they will be able to remotely ‘wipe’ any device clean of sensitive corporate data if it falls into the wrong hands.

Martin May
Martin May

For more information contact Enterasys Networks, +27 (0)11 234 2230, [email protected], www.enterasys.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Upgrade your PCs to improve security
Information Security Infrastructure
Truly secure technology today must be designed to detect and address unusual activity as it happens, wherever it happens, right down to the BIOS and silicon levels.

Read more...
The hidden cost of cheap networking gear
Duxbury Networking Infrastructure
When it comes to building a network, price is always a consideration, especially in the current economic climate, but there is a difference between smart spending and short-term savings with long-term losses.

Read more...
Open source code can also be open risk
Information Security Infrastructure
Software development has changed significantly over the years, and today, open-source code increasingly forms the foundation of modern applications, with surveys indicating that 60 – 90% of the average application's code base consists of open-source components.

Read more...
Fastest PCIe Gen 5.0 NVMe SSD
Products & Solutions Infrastructure
Sandisk has unveiled the WD_BLACK SN8100 NVMe SSD with PCIe Gen 5.0 technology, an internal SSD delivering speeds up to 14 900 MB/s and capacities up to 4 TB, with 8 TB solutions available soon.

Read more...
Unified storage solution
Products & Solutions Infrastructure
CASA Software has announced the local availability of Nexsan’s upgraded unified storage solution, Unity NV4000, which is ideal for mixed workloads, from virtualisation and video surveillance to secure backup and recovery.

Read more...
Suprema unveils BioStar Air
Suprema neaMetrics News & Events Access Control & Identity Management Infrastructure
Suprema launches BioStar Air, the first cloud-based access control platform designed to natively support biometric authentication and feature true zero-on-premise architecture. BioStar Air simplifies deployment and scales effortlessly to secure SMBs, multi-branch companies, and mixed-use buildings.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 8 TB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...
Advanced surveillance storage from ASBIS
Infrastructure Surveillance Products & Solutions
From a video storage solutions perspective, SkyHawk drives, designed for DVRs and NVRs, offer high capacity, optimised firmware, and a reliability workload rating of hundreds of terabytes per year.

Read more...
Power surges are killing our networks
Duxbury Networking Infrastructure
With power surges and lightning strikes becoming an all-too-familiar threat to South African infrastructure, Duxbury Networking is calling on local installers and network integrators to follow proper grounding protocols.

Read more...
A passport to offline backups
SMART Security Solutions Technews Publishing Editor's Choice Infrastructure Smart Home Automation
SMART Security Solutions tested a 6 TB WD My Passport and found it is much more than simply another portable hard drive when considering the free security software the company includes with the device.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.