Network infrastructure, technologies and security

July 2012 Infrastructure

Poorly configured and unprotected IP networks expose organisations to unnecessary security risks and present opportunities to those with malicious intent to misuse resources, gain unauthorised access to confidential data and introduce any number of viruses and spyware programs.

To ensure a safe and efficient network, businesses need to adopt a comprehensive approach to identifying, controlling and securing access to critical network communications and business services. Well architected network access control (NAC) solutions are able to decide whether a trusted user, a guest or a device can connect to a network and what they are authorised to do once they are connected.

Such a solution will evaluate each access request based on policy criteria such as device and user identity, business role, time of day, location and the health of the end system. Comprehensive NAC solutions employ a variety of assessment technologies, together with proactive and reactive policy enforcement to provide a solid pre-connect and post-connect end system security offering.

Today’s NAC solutions leverage a number of important functions, including authentication, assessment, authorisation and remediation, enabling IT organisations to best align NAC with business needs. These needs are increasingly related to the management and control of personally-owned devices such as tablets, laptop PCs and smartphones linking to the corporate network.

With the BYOD (bring your own device) phenomenon gaining momentum, many organisations are now deeply concerned about these devices violating long-held operational rules when connected to the network. The more vigilant companies have instructed their IT departments to introduce technologies to formalise the linking of BYODs to the corporate network.

These solutions must be capable of increasing the levels of intelligence of the corporate network infrastructure to the point where it is able to quickly and easily determine which end-users and what mobile devices are on the network – and whether their users are in compliance with established policies both prior to connection, and after connection.

Enterprise-wide visibility into the current status of all network devices (including BYODs), the end-points and end-users is required, as is a common management view of relevant information and events in context, together with the ability to automatically enforce predetermined policies. The challenge facing organisations today is to accept that new-generation technology is fundamental to network authentication and identity-based systems.

To achieve peace of mind organisations must deal with vendors capable of not only recognising the business advantages presented by increasingly sophisticated BYODs, but able to provide NAC through policies that include unified protection for the wired and wireless edge of heterogeneous infrastructures.

This functionality must be deeply integrated into the networking workflows and embrace appropriate policy options for control, virtualisation flexibility, as well as ‘anytime, anywhere’ management.

Already, many opportunities have been identified for the further development of NAC solutions and technologies. In fact, vendors are moving beyond NAC to deliver ‘application services engines’ that provide security, control and manageability of all wired and wireless end systems including BYODs. Not only do these solutions include more deployment modes, deeper integration with IT and security management systems, and enhanced application control to handle device proliferation, they provide better device-type granularity allowing different levels of network access to be granted to managed and non-managed BYODs.

With IT departments being called upon to track, manage and secure a broad range of BYODs on all the major mobile operating platforms, these application services engines provide solutions capable of the automatic discovery and provisioning of users and their devices based on a broadening range of criteria, including access location and operating system used.

This data will facilitate context-based management; enabling users to leverage only the most relevant network and corporate resources while giving IT managers greater visibility of the activities of employees, guests and their devices. While these new-generation solutions already alert managers should any BYOD be inappropriately used, it will not be long before they will be able to remotely ‘wipe’ any device clean of sensitive corporate data if it falls into the wrong hands.

Martin May
Martin May

For more information contact Enterasys Networks, +27 (0)11 234 2230, [email protected], www.enterasys.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Western Digital reveals new solutions
Products & Solutions News & Events Infrastructure
Western Digital unveiled new solutions and technology demonstrations at the Future of Memory and Storage Conference 2024. The innovations cater to diverse market segments, from hyperscale cloud to automotive and consumer storage.

Read more...
The Duxbury Services Gateway revolutionises the Edge
Products & Solutions Infrastructure
Duxbury Networking has announced the launch of the Duxbury Services Gateway (DSG) range. These cost-effective edge compute appliances are designed to meet the diverse needs of South African businesses including SD-WAN, Firewall, and IP PBX applications.

Read more...
Navigating the evolving tech landscape in 2024 and beyond
Residential Estate (Industry) Infrastructure
Progress in the fields of AI, VR and social media is to be expected, but what is not, is our fundamental relationship with how we deploy solutions in our business and how it integrates with greater organisational strategies and goals.

Read more...
Eight terabyte desktop SSD
Products & Solutions Infrastructure
Western Digital has expanded its SanDisk portfolio with the new 8 TB SanDisk Desk Drive, its highest capacity yet on an external desktop solid state drive (SSD), also available with 4 TB

Read more...
78% of organisations highly concerned about cloud security
Information Security Infrastructure
As organisations develop and deploy more cloud applications, security becomes more complicated. Many organisations are adopting a hybrid or multi-cloud approach, which has expanded the attack surface and increased complexity.

Read more...
Share large files securely and without delay
Infrastructure Products & Solutions
Professional teams don't have to wait for large file uploads, dabble with insecure sharing platforms, or spend money on file servers and network storage. StorVault FileSpace is a South African solution providing fast, affordable, and secure file streaming.

Read more...
Expanded Cambium cnMatrix portfolio for enhanced network automation
Duxbury Networking Infrastructure Products & Solutions
Duxbury Networking, a southern Africa distributor for Cambium Networks, has announced that Cambium has expanded its cnMatrix switch portfolio with enhanced network automation and the new EX3024F Fibre Aggregation Switch.

Read more...
Do you need a virtual CIO?
Editor's Choice News & Events Infrastructure
If you have a CIO, rest assured that your competitors have noticed and will come knocking on their door sooner or later. A Virtual CIO service is a compelling solution for businesses navigating tough economic conditions.

Read more...
The TCO of cloud surveillance
DeepAlert Verifier Technews Publishing Surveillance Infrastructure
SMART Security Solutions asked two successful, home-grown cloud surveillance operators for their take on the benefits of cloud surveillance to the local market. Does cloud do everything, or are there areas where onsite solutions are preferable?

Read more...
Cyber resilience – protect, defend, recover
Infrastructure
The challenge with AI is that threats are getting harder to detect. As a result, plans in 2024 are not just about detection and prevention, but about recovery.

Read more...