Skip Links

Network World

  • Social Web 
  • Email 
  • Close

It takes more than NAC to block malware

Symantec survey of InfoSecurity 2007 attendees
Security: Network Access Control Alert By Tim Greene , Network World , 10/16/2007
Tim Greene
Sign up for this newsletter now!

Of businesses that already use NAC in combination with antivirus software, more than a third suffer malware attacks anyway, according to a survey funded by Symantec.

Based on results of questioning 300 people who attended InfoSecurity 2007, 82% said they use NAC in combination with antivirus software, and 36% said their networks became infected with malware anyway.

This result indicates what is commonly accepted about NAC, that it isn’t the only security networks need to block malware. It is a risk-mitigation measure because it can identify machines less likely to be infected and allow only those onto the network. But as the result shows, that doesn’t mean they aren’t infected.

Those who had implemented NAC were asked the main reasons for doing so, and were allowed to respond to more than one choice. The top three chosen were preventing unauthorized users from getting on the network (80%); preventing data loss (66%); and enforcing security and access policies (61%).

More than half (55%) of the respondents already have NAC of some sort installed in their networks, and 31% say they are not interested in NAC.

These NAC users were also asked what other technologies they required to interoperate with NAC, and 98% chose other security software. Three other technologies mentioned were virtual desktops (53%); printers and peripherals (51%); and mobile gear (47%).

The top three reasons businesses hadn’t deployed NAC were that it cost too much (35%); it was incompatible with the network or operating systems (27%); and it was too disruptive to the network and to the organization as a whole (20%).

Asked where they thought NAC was best enforced, 63% said on the network; and 37% said on the endpoint. Each choice included a qualifying statement. Part of the network question said, “It’s better to rely on the network’s own security features to prevent attacks and damage.” The endpoint choice included, “It’s better to evaluate and remediate devices before they connect to the network.”

When asked “what frustrations, if any, have you had in implementing or managing” NAC, an astounding 86% said “none.” Based on reports about product testing done by professionals and on anecdotes from NAC customers, it’s hard to believe so many found no frustrations.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comments (2)
Login
Forgot your account info?

Nothing Really New or Useful HereBy Dana Hendrickson on October 16, 2007, 10:46 pmThis is just one more in a steady stream of articles about NAC surveys with useless data and uncritical analysis. Instead of railing on this website about the worthlessness...

Reply | Read entire comment

RE: It takes more than NAC to block malwareBy domwilde on October 16, 2007, 6:25 pmInteresting stats here that validate the fact that NAC has to evolve into a more holistic approach than just endpoint posture checking. An approach that we have...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

Intel...I guarantee you will never ever see a customer using Wimax the way it was laid out by Intel 6...- Anonymous

Join the Discussion