IMPLEMENTING NAP AND NAC SECURITY TECHNOLOGIES: THE COMPLETE GUIDE TO NETWORK ACCESS CONTROL

By W. HAVAO

CONTENTS CHAPTER UNDERSTANDING TERMS AND TECHNOLOGIES WHO IS THE TRUSTED COMPUTING GROUP? IS THERE A CISCO NAC ALLIANCE PROGRAM? NAC-CERTI?ED SHIPPING PRODUCT DEVELOPING NAC SOLUTIONS UNDERSTANDING CLIENTLESS AND CLIENT-BASED NAC CLIENTLESS NAC CLIENT-BASED NAC PRE-ADMISSION NAC POST-ADMISSION NAC SUMMARY CHAPTER THE TECHNICAL COMPONENTS OF NAC SOLUTIONS ANALYZING THE SECURITY POSTURE WHAT TO ANALYZE? DOES YOUR COMPANY HAVE THE ‘‘STRENGTH’’? PATCH ANALYSIS BEST PRACTICES HOW THE ANALYSIS TAKES PLACE UTILIZING APIS FOR ANALYSIS MONITORING PROCESSES MONITORING FOR UNWANTED PROCESSES AND APPLICATIONS SETTING POLICY FOR DEVICE ANALYSIS THE NEED FOR DIFFERENT ANALYSIS POLICIES COMMUNICATING THE SECURITY POSTURE OF THE DEVICE COMMUNICATING WITH NAC/NAP-SPECI?C SOFTWARE COMPONENTS COMMUNICATING THE SECURITY POSTURE TO THIRD-PARTY APPLICATIONS COMMUNICATING WITH NETWORK DEVICES CISCO TRUST AGENT UNDERSTANDING TCG IF-TNCCS AND MICROSOFT IF-TNCCS-SOH TAKING ACTION BASED ON THE SECURITY POSTURE MOBILE NAC ACTION LAN-BASED NAC ACTIONS REMEDIATING THE SECURITY DE?CIENCY REMEDIATION ACTIONS THE REPORTING MECHANISM KNOWING THE CURRENT STATE OF DEVICES HELPING WITH AUDITS AND COMPLIANCE STANDARDS REPORTS HELP FIND THE PROBLEM WHAT ARE YOU TRYING TO PROTECT? LAN-BASED NAC SEDENTARY DESKTOP LAPTOPS USED ON AND OFF THE LAN MOBILE-ONLY LAPTOPS EMPLOYEE-OWNED HOME COMPUTERS UNKNOWN DEVICES PDAS AND OTHER DEVICES MOBILE NAC DANGERS OF MOBILITY PROS CONS UNDERSTANDING THE NEED FOR LAN-BASED NAC/NAP THE SECURITY REASONS FOR LAN-BASED NAC UNINTENTIONAL LAN-BASED THREATS THE PROS AND CONS OF A GUEST NETWORK PRO CON THE PROS AND CONS OF ASSESSING EACH DEVICE REAL-WORLD EXAMPLE OF AN UNINTENTIONAL THREAT INFECTING BY TRANSFERRING FILES HOW FILES REALLY GET TRANSFERRED INFECTING VIA WORMS SYSTEM CHANGES REGISTRY DOES LAN-BASED NAC PROTECT AGAINST INFECTION? INTENTIONAL LAN-BASED THREATS EXPLOITATION BY AUTHORIZED ACCESS AND MALICIOUS USE EXPLOITATION BY AUTHORIZED PHYSICAL ACCESS AND UNAUTHORIZED LAN ACCESS EXPLOITATION WITH UNAUTHORIZED PHYSICAL ACCESS AND UNAUTHORIZED LAN ACCESS EXPLOITATION FROM UNAUTHORIZED WIRELESS AND REMOTE ACCESS CONNECTIVITY TO THE LAN DOES LAN-BASED NAC PROTECT AGAINST INTENTIONAL THREATS? UNDERSTANDING THE NEED FOR MOBILE NAC WHAT’S THE PRIMARY NEED? WHY COMPANIES LOOK TO MOBILE NAC MOBILE NAC AND COMPLIANCE REGULATIONS MOBILE NAC AND DIRECT ATTACKS EXPLOITING LAPTOPS WITH DIRECT ATTACKS VIEW A WEB PAGE FOR TWO SECONDS AND GET HACKED! PROTECTING AGAINST AP PHISHING AND EVIL TWIN USING MOBILE NAC TO PROTECT AGAINST ATTACKS WHY PROXY SETTINGS DON’T OFFER ROBUST SECURITY MOBILE NAC AND THE WIRELESS THREAT PUBLIC WI-FI HOTSPOT RISKS THE RISKY HOME OF?CE WIRELESS ATTACKS WHEN THERE’S NO WIRELESS NETWORK MOBILE NAC AND THE MALWARE THREAT HOW OLD SHOULD ANTIVIRUS DE?NITIONS BE? ADWARE ISN’T YOUR BIGGEST PROBLEM ENCRYPTION ISN’T ALL YOU NEED TO PROTECT DATA UNDERSTANDING CISCO CLEAN ACCESS DEPLOYMENT SCENARIOS AND TOPOLOGIES CISCO CLEAN ACCESS THE CISCO NAC GUEST SERVER THE TECHNICAL COMPONENTS OF CISCO CLEAN ACCESS ANALYZING THE SECURITY POSTURE OF A DEVICE THE CISCO NAC PRO?LER THE PURPOSE OF CISCO CLEAN ACCESS UNAUTHORIZED USERS AUTHORIZED USERS WITH DE?CIENT SECURITY POSTURES MOBILE USERS UNDERSTANDING CISCO NETWORK ADMISSION CONTROL FRAMEWORK NETWORK ADMISSION CONTROL FRAMEWORK THE TECHNICAL COMPONENTS OF THE CISCO NAC FRAMEWORK THE PURPOSE OF CISCO NAC UNDERSTANDING FIBERLINK MOBILE NAC FIBERLINK MOBILE NAC COMPONENTS THE TECHNICAL COMPONENTS OF FIBERLINK MOBILE NAC THE PURPOSE OF FIBERLINK MOBILE NAC UNDERSTANDING MICROSOFT NAP SOLUTIONS NETWORK ACCESS QUARANTINE CONTROL MICROSOFT 802 1X NAP THE TECHNICAL COMPONENTS OF MICROSOFT NAP CONNECTION REQUEST POLICIES HEALTH POLICIES NETWORK ACCESS PROTECTION POLICIES NETWORK POLICIES THE PURPOSE OF MICROSOFT NAP UNDERSTANDING NAC AND NAP IN OTHER PRODUCTS NAC-LIKE FUNCTIONALITY IN NON-NAC TECHNOLOGIES NAC FUNCTIONALITY IN IPSEC VPN NAC FUNCTIONALITY IN SSL VPN NAC AND NAP SOLUTIONS FROM OTHER VENDORS WHAT TO LOOK FOR IN A NAC/NAP SOLUTION OTHER NAC/NAP VENDORS