- Worst of the lot: PCConnection and PCMall
- 10 ways the Chinese Internet is different
- Hacker writes rootkit for Cisco's routers
- Cisco loses $2 million order to Nortel
- Enterasys, Extreme hooking up?
Microsoft / Yahoo heading for a shotgun wedding?. Listen now!
Interop emphasizes savings; Rackspace launches cloud storage. Listen now!
Migrating to a new messaging system is a tedious, complex and risky process. And since this isn’t something you do everyday, you need to know "best practices" to ensure a successful migration.
Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.
Watch Raven Zachary, Research Director for Open Source at the 451 Group, an independent IT analyst firm, discuss the emergence of enterprise Linux and the role of Oracle Unbreakable Linux support.
f**k.me, bang.me, suck.me, etc. etc...- Anonymous
NetScout is one of the world's premier providers of integrated network and application performance management solutions.
This guide provides a comprehensive checklist for implementing a proactive Network and Application performance management solution.
Discover a unique and powerful approach to reducing MTTR in complex environments.
Distinguishing Business Use of the Network from Recreational Use.
Trusted Computing Group has expanded its interest in NAC to include the way devices behave once they have been admitted to networks, and the group is demonstrating this capability at Interop Las Vegas.
Formerly focused just on the security of endpoints before they are admitted to networks, TCG today is announcing a new protocol to help coordinate network security devices so they can respond to threatening behavior of devices that have already connected to networks. (Compare NAC products.)
The protocol acts as a common language that security devices can use to upload data to a meta-data access point (MAP). The MAP then publishes that data to other devices on the network that have subscribed to it. The same protocol, called IF-MAP, is used to access posted data from the MAP.
Based on this composite store of security information, each device can make better-informed decisions about restricting devices deemed to be violating security policies.
For example, the MAP may publish that the configuration of a router has been changed by a device at a certain IP address. Security management software may use this data to determine that that act puts the IP address in violation of security policy. Via the MAP, the security management software can publish that the IP address should be blocked, and a firewall monitoring the MAP could block the IP address based on that notification.
The protocol could have other applications, says Stu Bailey, CTO of Infoblox, who helped work on IF-MAP. For instance, components of an automated supply-chain system could use the protocol to publish data to a MAP so other elements could make decisions based on more data, he says.
Using IF-MAP in a NAC framework provides a standard in which gear from multiple vendors can be used to perform post-admission NAC, something that is already possible on a proprietary basis via individual vendors. With the standard protocol and a MAP device, security gear that is already installed in networks could contribute to post-admission NAC.
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com The Industry Standard IDG List Services |
 |
Copyright © 1994-2008 Network World, Inc. All rights reserved. |
