Access "Learn how to choose NAC services"
This article is part of the October 2008 issue of Security 7 Award winners sound off on key information security issues
NAC Services Verizon Business Price: Based on size and type of engagement Network access control adoption is growing--an Infonetics report earlier this year reported 16 percent growth over Q1 2007. But even in a consolidating market, choosing the best technology for your organization is no simple matter. You have to ask: Do you choose an inline appliance, or out-of-band or switch-based product? What type of enforcement will you employ? Do you require post-connect as well as pre-connect device assessment? Are the benefits of NAC to your company even worth the investment and the difficulties of deploying and maintaining NAC in your network? Verizon Business has announced dedicated professional services to NAC, but a managed service is another matter. "There are too many options; it's too complicated, it's too deep, it's too broad," says Omar Khawaja, Verizon manager of security solutions marketing. "NAC is more about integration, what a NAC solution has to complement, and less about installation." The exception is Cisco's NAC appliance, offered as a managed ... Access >>>
Premium Content for Free.
Embedded smart card chips are open to hack attacks
Using power analysis attacks, including Simple Power Analysis, hackers can attack the embedded microchips inside smart cards.
Product Review: Application Security Inc.'s AppDetectivePro
Application Security Inc.'s AppDetectivePro does deep inspections of database configurations to identify security issues. It's ideal for internal and external auditors, security professionals, consultants and others who need to perform on-the-fly database vulnerability assessments.
Learn how to choose NAC services
Figure out the right questions to ask your network access control (NAC) service provider or vendor.
Encryption no longer an optional technology
Unravel the ins and outs of how your organization should deploy encryption.
- Embedded smart card chips are open to hack attacks
Security 7 Award winners tackle important information security issues
The 2008 Security 7 Award winners have their say on information sharing, perimeter security, relationships, convergence, strategy, history and progress.
Product Review: Finjan Vital Security NG-5000
Finjan's Finjan Vital Security NG-5000's Web filtering engines provide strong detection of Web-based security threats.
LogRhythm product review
LogRhythm is a cross-platform log management that manages audit files and IT security management processes.
Product Review: Cymphonix's Network Composer
Cymphonix's Network Composer is a security and visibility appliance that controls and monitorstraffic passing through the network perimeter to the Internet.
- Security 7 Award winners tackle important information security issues
Bruce Schenier, Marcus Ranum debate risk management
Experts Bruce Schneier and Marcus Ranum debate whether risk management is an appropriate strategic direction for information security professionals to follow.
Combat social engineering the 'Carnegie' way
Dale Carnegie's "How to Win Friends and Influence People" can be a valuable tool for CISOs who are up against social engineering issues.
Interview: Chris Nickerson of TruTV's 'Tiger Team'
Chris Nickerson of Lares Consulting explains best practices for penetration tests and the risks of outsourcing.
Information security professionals have their say
Information Security magazine's Security 7 Award winners write personal essays on topics ranging from perimeter security, information sharing, physical and logical security convergence and progress made in the industry.
- Bruce Schenier, Marcus Ranum debate risk management
More Premium Content Accessible For Free
Deploying data protection technologies properly requires a lot of time and patience. While most firms can get started by using preconfigured policies...
The bring your own device (BYOD) movement, which has flooded the enterprise with employee-owned smartphones, tablets, phablets and purse-sized ...
For so long penetration testing meant hiring an expert to use skill and savvy to try to infiltrate the company system. But, as with most ...