NAC and endpoint security: The hard questions

Date: Mar 13, 2007

In this exclusive presentation from SearchSecurity.com's Integration of Networking and Security School lesson, Locking down the endpoint: How network access control can boost host security, Joel Snyder covers challenging endpoint security questions and explains how NAC technology can address them. Topics include:

Essential policies and baseline controls for endpoint systems
How different products assess endpoint health; thick agents, on-demand agents and agent-less configurations
Overview of Vista's impact on endpoint security; pros and cons
Inline and out-of-band network devices

More on Network Access Control Basics

In 2013, Cisco network security product strategy to key on integration
VIDEO - Video: Cisco SVP Chris Young details the vendor's 2013 network security product strategy, specifically combining more features into its line of ASA firewalls.
Inside the NSA trusted computing strategy
VIDEO - The NSA’s Tony Sager discusses the NSA trusted computing strategy and the importance of finding cost-effective ways to disrupt potential attackers.
Endpoint integrity enforcement: The ins and outs
VIDEO - Learn about the latest in endpoint integrity enforcement and the questions you should ask vendors and groups within your own organization to stop infected, non-compliant endpoints from threatening your business.
Unmanaged endpoints? Rethink the defense-in-depth security model
Tip - Today's endpoint security model is failing. What's next? Learn why endpoint defense-in-depth controls must assume the endpoint is compromised.
How to review VoIP phone security amid Cisco IP phone vulnerabilities
Answer - In light of recent Cisco IP phone vulnerabilities, expert Brad Casey evaluates VoIP phone security and offers measures to secure VoIP phones.
Application whitelisting vs. blacklisting: Which is the way forward?
Answer - Which method is better at fighting next-gen malware? Security expert Michael Cobb weighs in on the application whitelisting vs. blacklisting debate.
Defense-in-depth security: How to establish an ultra-redundant network
Tip - Matthew Pascucci discusses layered security, explaining how to apply defense-in-depth principles toward an ultra-redundant network security posture.
BYOD security strategies: Balancing BYOD risks and rewards
Feature - Allowing employee-owned mobile devices doesn’t have to mean accepting all BYOD risks. Infosec pros share their BYOD security strategies.

Back to top

Cloud Security
- Storing data in the cloud: Addressing data location security issues
  
  When storing data in the cloud, ignoring the physical location of cloud data is a major mistake. Learn how to prevent data location security issues.
- An introduction to enterprise hybrid cloud security
  
  A custom cloud infrastructure requires a special set of security controls. Get advice on how to implement hybrid cloud security the right way.
- SOC 2 reports: The de facto cloud provider security standard
  
  They're not perfect, but SOC 2 reports are becoming the baseline for cloud provider security assessments. Expert Dave Shackleford discusses.
Consumerization
- Rich mobile platforms vs. mobile Web-based services
  
  One big debate right now is whether employees should use local applications or mobile Web-based services. There are use cases for each kind of app.
- NAC security becoming critical infrastructure component for BYOD
  
  Organizations are warming up to NAC security products due to popularity of BYOD for robust device security and better systems integration.
- Managing endpoints is about monitoring access, not device control
  
  Managing endpoints in the BYOD era isn't easy, and you have to come at it with the right attitude. Focus more on access and less on device control.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Black Hat 2013: Experts urge elliptical curve cryptography adoption
  
  A session by a team of crypto experts at Black Hat USA 2013 argued that RSA and Diffie-Hellman should be abandoned in favor of ECC.
- New advanced persistent threat protection: Beyond perimeter defense
  
  Firewalls and antivirus are ineffective in the face of APT attacks. Expert Nick Lewis offers suggestions for advanced persistent threat protection.
- Cisco spends cool $2.7 billion in Sourcefire acquisition
  
  In biggest security acquisition since 2011, Cisco has announced it will buy IDS maker Sourcefire for $2.7 billion.
Information Security
- Indian banks step up security amid mobile banking acceleration
  
  The Indian banking system is at the begining of a new era, driven by mobile technology, but the widening of access to banking services brings with it security risks
- Web app attacks demand automated defences, study finds
  
  Automation is the most effective way to tackle multiple prolonged cyber attacks on web applications, a study has confirmed
- BlackBerry ready to enable India to track messages
  
  BlackBerry is ready to provide Indian law enforcement authorities with a way to track emails, email attachments and chats sent over its services
Computer Weekly
- ICO to investigate London bins that track smartphones
  
  Information Commissioner's Office is making enquiries into bins in London that track passing smartphones to target advertising to owners
- The battle for the cloud
  
  Pure cloud providers have changed the game and traditional mega-suppliers must fight to keep up
- Well-managed software for flexible and resilient IT
  
  Managing software assets is vital for maintaining a flexible and up-to-date IT platform. We look at best practices for software asset management

Latest Headlines

Featured

E-Books

E-Zines

E-Handbooks

Topics

Hot Topics

Advice & Tutorials

Technology Dictionary

Tips

Answers

Ask a Question

Research Library

Product Demos

Resource Centers

Blogs

NAC and endpoint security: The hard questions

NAC and endpoint security: The hard questions

More on Network Access Control Basics

More from Related TechTarget Sites