Network Access Control Technology—Proposition to Contain New Security Challenges
- 1 Laboratoire Mathématiques, Informatique et Applications, Faculté des Sciences, Université Mohammed V-Agdal, Rabat, Morocco
- 2 Laboratoire Mathématiques, Informatique et Applications, Faculté des Sciences, Université Mohammed V-Agdal, Rabat, Morocco
- 3 Laboratoire Mathématiques, Informatique et Applications, Faculté des Sciences, Université Mohammed V-Agdal, Rabat, Morocco
Abstract
Traditional products working independently are no longer sufficient, since threats are continually gaining in complexity, diversity and performance; In order to proactively block such threats we need more integrated information security solution. To achieve this objective, we will analyze a real-world security platform, and focus on some key components Like, NAC, Firewall, and IPS/IDS then study their interaction in the perspective to propose a new security posture that coordinate and share security information between different network security components, using a central policy server that will be the NAC server or the PDP (the Policy Decision Point), playing an orchestration role as a central point of control. Finally we will conclude with potential research paths that will impact NAC technology evolution.
- 2011 Cybersecurtiy Watch Survey. http://www.idgenterprise.com/5/post/2011 /01/2011-cybersecurity-watch-survey-organizations-need-more-skilled-c yberprofessionals-to-stay-secure.html
- Gartner, Information Technology Research and Advisory. www.gartner.com
- “Cisco NAC Appliance Enforcing Host Security with Clean Access Jamey Heary,” CCIE? No. 7680, 2007.
- Juniper Unified Access Control. http://www.juniper.net/us/en/products-services/security/uac/#overview
- Trusted Network Connect. http://www.trustedcomputinggroup.org/developers/trusted_network_connect
- Cisco NAC OOB Deployment. http://www.cisco.com/en/US/products/ps6128/ products_configuration_example09186a0080a138cc.shtml
- Firewall policy rules using Fully Qualified Domain Name. http://www.cisco.com/en/US/docs/security/ security_management/cisco_security_manager/security_ manager/4.2/us er/ guide/fwident.pdf
- http://www.packetfence.org/
- http://www.snort.org/
- http://www.nessus.org