* Sophos acquires Endforce
Sophos, best known for its antivirus software, is getting into network access control with the acquisition of Endforce.
Endforce software checks whether devices logging in to networks have current antivirus signatures, patched operating systems, are operating personal firewalls and have only authorized applications in use.
The software does this with or without an agent on the endpoint and can use DHCP controls and 802.1x authentication to enforce the policies that have been set about the security posture of end devices.
The software also comes with a central platform to define and maintain endpoint policies. Sophos had none of these capabilities before.
The Endforce software works in conjunction with security applications made by other vendors including McAfee and Symantec as well as infrastructure vendors 3Com, Cisco and Juniper.
So users would set policies for the profiles end devices need to get on the network, then assess each endpoint as it tries to gain access. Based on those assessments, the software creates reports and sends alerts about the attempts to join the network.
The technology can combines users’ roles, their access method, the health of the device they are using and what threat responses are available to determine whether a user gains access.
It also automatically enforces the policies by permitting, quarantining or denying access to the network.
This deal brings Sophos into the thick of NAC at a time when businesses might be looking to gradually try out the technology. And they may feel more comfortable doing so with a current vendor, Sophos says.
