Network World
Saturday, November 22, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Community: Security

Navigation

This is really a general software problem...

This seems to indicate that customers are fed up with bad software, not agents per se. The example cited was an antivirus product with a brain-dead approach to updating antivirus software, not NAC.

While some NAC agents may require daily updates, Lockdown Networks updates the appliance, not the agent, and can work with or without agents. Many others work this way, as well.

This strikes me as an odd article article that makes a huge claim without much justification...

I wrote about this in more detail at http://nactalk.lockdownnetworks.com/

Click to read the article this is in response to.

Blogs like nactalk.lockdownnetworks.com

0

Does anyone else find vendor blogs like nactalk.lockdownnetworks.com a little troubling? They appear as a neutral blog discussing a topic, except they only contain the vendor's point of view.

While they seem to allow comments, the one time I registered and tried to comment, it was never approved. I'm assuming that since none of their other "vendor patting themselves on the back" articles have comments, I am not the only one.

Can't live with them, can't live with them

0

I guess that is true of agents in general and not just NAC agents. The problem is no matter how appealing there are times you just can't get it done without an agent. Yes you can try and some will say of course you can, but they are making compromises. So sometimes you need an agent, sometimes you don't.
I have written more about this on my blog here

As to Robert B's comments. I do agree the Lockdown Blog is not much of a forum and I even hesitate to use the word blog for it. I have written more about that in my article as well.

What NAC is right for me?

0

So many NAC vendors are claiming to have a agentless solution but the blocking mechanism is too much of a high risk, some are creating ACL's to the switching infrastructure if the switches are supported. The other solution I've seen has what is referred to as a Virtual Firewall to block devices but all that is nothing more than TCP resets witch is not enough to block devices.
Has anyone found a true agentless NAC with a unique blocking technique? I have only seen one Insightix and they seem to have done their homework on NAC. Has anyone had any experience with it?

Lockdown Networks

0

It would be nice to know that Lockdown Networks has seized operations as of March 18, 2008 so this is no longer a viable solution.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <i> <b> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <br /> <br> <p>
  • Lines and paragraphs break automatically.
  • You can use BBCode tags in the text.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

Advertisement: