What the various remote security vendors do

Last time, we noted that iPass had announced an intent to coordinate enterprise network security policies with assessment and remediation of various types of security software you might be running on mobile users’ client devices.

Last time, we noted that iPass had announced an intent to coordinate enterprise network security policies with assessment and remediation of various types of security software you might be running on mobile users’ client devices.

Competitor GoRemote’s offering in this area is called Total Security Protection. The company differentiates itself in that, first of all, it is in the managed VPN services business and its stated mission is to offer “secure remote access” regardless of whether users are mobile or in a remote office or home.

In other words, it will install and manage the software and security components on your behalf, not merely check and update what you install. Like iPass, users must be using a connection offered by the service provider in order for their sessions to be “frisked” and updated.

GoRemote says it believes it is the only company to offer a real-time network management portal; a network administrator can view in real time who is accessing the network, by what type of connection and what credentials they are presenting.

For its part, Fiberlink will offer endpoint security services regardless of whether you are using its connectivity services. The company ties together anti-virus, personal firewall, VPN and access policies with its Dynamic Network Architecture, or DNA (the portal in its network operations center that does the compliance checking) and Extended360 (its client software). Violation of one policy (such as turning off anti-virus software) can trigger an action in another security component, such as shutting down a VPN connection.

Fiberlink says its strategic direction is toward becoming a software, rather than a services, provider.

In a nutshell, the differences among the three providers today are:

1) Whether they offer managed security services (GoRemote and Fiberlink do; iPass doesn’t).

2) Whether they will provide you with security software per se (GoRemote and Fiberlink) or require that you install your own security software and integrate with it for assessment and remediation (iPass).

3) Whether they protect your corporate network and client device from infection even if you are using another provider’s connectivity services (Fiberlink does; GoRemote and iPass do not).

Meanwhile, Cisco Network Admission Control (NAC), which we reported on earlier this year, became available recently in Cisco routers running Cisco IOS Software Release 12.3(8)T. The router conducts session assessment and remediation before allowing remote workers access onto the corporate network.

NAC supports endpoints running Microsoft Windows NT, XP, and 2000 operating systems, enabling it to check on operating system patches, and endpoints running anti-virus software from partners McAfee, Trend Micro and Symantec. An open API enables other companies to add their security software products into the fray.