- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
Senior Editor Tim Greene clarifies issues surrounding the evolving NAC security architecture.
Microsoft has donated part of its network access protection (NAP) software to the public, and it has been picked up by the Trusted Computing Group as one of its NAC standards.
The protocol is used for the communication between the device trying to get on the network and the server deciding if it actually will. The protocol comes as part of Microsoft’s Vista client, so it will be pretty available on network endpoints after awhile, making it somewhat simpler for business users to deploy NAC.
Along with the announcement of Microsoft’s contribution, Juniper announced that its NAC architecture is compatible with the Microsoft protocol. In other words, they work together, and they demonstrated this at Interop Las Vegas.
Absent from this news is Cisco, whose own CNAC scheme employs its own client software - the Cisco Trust Agent - and uses its own protocol.
Cisco is also not a member of TCG so pays little attention to TCG’s standards. Instead, Cisco is working on standards within the IETF, which doesn’t even have formal proposals yet for this particular protocol.
TCG and IETF efforts are to make it possible for customers of NAC to pick and choose among the makers of the many pieces that comprise NAC deployments. TCG seems to be working faster at it.
NAC is still developing, and vendors of NAC gear are feverishly trying to get customers and stake out claims to as many NAC customers as possible. This is a standard part of any technology development.
Also standard is the development of standards, which usually happens after the vendors have already staked out customers.
That is what is happening here. TCG and its members are coming up with standards early because it helps them grab early customers. Cisco isn’t participating because it can grab more customers by waiting for later standards.
Meanwhile, the Microsoft contribution is good for Microsoft because it makes its Vista client more valuable to customers. It is also good for non-Cisco NAC vendors for whom it means more possible sales.
Tim Greene is senior editor at Network World.

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (1)
Missing facts?By Anonymous on April 3, 2008, 10:21 amYour article mentions "Absent from this news is Cisco..." You failed to point out that Microsoft and Cisco announced a joint architecture for NAC-NAP interoperability...
Reply | Read entire comment
View all comments