- Microsoft will float cloud OS this month
- Top 16 Chinese iPhoneys
- Pimp your ride: Cool car technology
- Laptop stolen from McCain campaign
- Cisco, Microsoft roll out server, networking appliance
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Value of WDS
Juniper Networks is linking its intrusion-detection platforms to its NAC gear, making it possible to restrict devices that manage to gain network access by passing health checks but then pose a threat once they are on.
With a new version of its Unified Access Control (UAC) software -- Juniper’s name for NAC -- data gathered from the company’s Intrusion Detection and Prevention (IDP) platforms can trigger its UAC gear to block potentially malicious traffic at its source. Operating alone, IDP drops suspect packets, but doesn’t deal with where they come from.
This integration gives Juniper a flavor of postadmission NAC by supplying its UAC Infranet Controller with data about application traffic. The controller can correlate the anomalies and threats IDP finds with specific users. Then it can apply policies to mitigate threats. So if a device is the source of a threat, it can be quarantined or have malicious sessions cut off. If the event is less severe, the controller can just log it.
Before, the NAC gear simply wouldn’t know about threats found by IDP.
Enterasys integrated its IDP with its intrusion-detection gar in January, and other NAC vendors, such as ConSentry, ForeScout, Insightix and Tipping Point, already offer postadmission NAC.
The new software supports only integration with Juniper’s IDP, so customers with IDP gear from another vendor don’t gain from
this feature, says Andrew Braunberg, an analyst with Current Analysis. He says demand from customers may ultimately push the
company toward third-party integration.

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
Security Considerations When Deploying Remote Access SolutionsEffective network security is most successful when you use a layered approach, with multiple...

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Turning information into a Competitive AdvantageCompanies today are realizing that competitive advantage is harder to sustain when based solely on...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment