|
| |
|
|
Dynamic NAC Technology  |
|
|
| |
| |
|
|
| |
|
|
Infoexpress
Dynamic NAC Suite: Network Access Control
Full Featured NAC in an Hour
The Dynamic NAC Suite solution is a full featured, low impact, network access control
solution. Requiring no network changes, the software provide vastly improved network
visibility and control. The deep inspection and remediation keeps PCs up to date and
reduces their vulnerability to malware. The user authentication and posture checks block
rogue devices while allowing legitimate guests and employees.
Dynamic NAC Suite is easy to install and operate, greatly reducing the initial and on-going
costs for network access control. Dynamic NAC Suite can usually be installed in less than
an hour, in contrast to most NAC approaches which take days for even a small network.
Dynamic NAC Suite automates network access control, reducing load on administrators.
Comprehensive posture checking validates endpoint health for each network device.
Remediation automatically corrects configuration deficiencies for managed endpoints.
Quarantining traffic from unknown endpoints keeps rogue devices off the network.
Dynamic NAC Suite monitors and enforces continuously. Policies can be updated to reflect
changing requirements, which revalidate endpoints in real time. The software compares
patch levels, configuration, and application settings with the appropriate corporate
security policy to maintain endpoint integrity.
| |
Key Features and Benefits |
|
| |
• Authenticates Users and Guest
transparently before granting access to
the network
• Centralizes Management
across multiple policy servers from a
single console.
• Controls Access
by quarantining rogue devices that do
not comply with policies and remediating
unhealthy endpoints.
|
|
• Makes Unknown Devices Visible
by passively listening to trffic on the
network, and actively probing.
• Supports Multiple NAC Methods
including Dynamic NAC, SSL VPN,
802.1x, and in-line filtering.
• Works with Existing Networks
including unmanaged and managed
switches, routers, and VPNs - all without
equipment upgrades. |
|
| |
|
|
|
|
CyberGatekeeper Server Appliance
Policy Server and OOb Enforcer
To keep enterprise networks running safety, organizations must ensure endpoints are
compliant with baseline security and application requirements. The network access
control solutions from InfoExpress compare devices with compliance requirements
before allowing access to the network. Unpatched, misconfigured or infected machines
are automatically remediated before they are allowed access to the network. Fewer
compromised systems are the self-service capability saves time and lowers support costs.
The CyberGatekeeper Server appliance packages a policy server, multiple out-of-band
enforcement modules, and an in-line enforcer into a single appliance. The policy server
checks if computers comply with policies requiring process, registry, files, and other
configuration settings. The enforcement modules isolate endpoints that are out of
compliance.
The enforcement modules included with CyberGatekeeper Server can quarantine devices
attached to managed and unmanaged switches, IPSec VPNs, SSL VPNs, and more. With
heightened visibility and control of endpoint devices, administrators can enforce baseline
configuration for all computers on the network. The product's comprehensive checks
and quarantine capabilities can automatically remediate issues to reduce the impact to
help desks.
Additional policy management and report softwares is included for a complete NAC
solution, which includes Dynamic NAC, the NAC solution that installs in less than an hour.
| |
Key Features and Benefits |
|
| |
• Includes CyberGatekeeper Manager
softwares to build policies, create agents,
and generate reports.
• Checks Endpoints
according to policy criteria and sends
remediation actions to non-compliant
endpoints.
• Authenticates Users and Guests
before granting access to the network. |
|
• Quarantines Unauthorized Devices
such as rogue computers, non-compliant
PCs, and unknown network devices.
• Works with Existing Networks
to provide a complete NAC solution for
unmanaged and manages switches,
remote access VPNs, and WLANs.
|
|
| |
|
|
|
|
| |
Specifications |
|
| |
HARDWARE |
|
| |
CyberGatekeeper Server Appliance
CGS-1000 - 1U Rackmount, single power supply
CGS-2000 - 2U Rackmount, dual hot swap power supply
Up to 10,000 concurrent audit sessions
Enforcement modules: Dynamic NAC for LAN and WLAN, 802.1x, in-line bridge, most SSL
VPN, Cisco NAC |
|
| |
Physical (1U)
MTBF: >20,000 hours
Chassis: 1.75" x 19" x 15.5", 15Ibs
Power: 100-240 VAC, 6A-3A, 60-50 Hz
|
|
Physical (2U)
MTBF: >20,000 hours
Chassis: 3.45" x 19" x 18.25", 27Ibs
Power: 115-240 VAC, 8A-4A, 63-47 Hz
|
|
| |
SOFTWARE |
|
| |
Policy Manager
- Builds policies that check for programs, files, registry, process, libraries, versions, profiles,
IP address, operating system, third party applications, antivirus, personal firewalls, and
other applications. Plusins support custom checks through WMI and other methods.
Report Manager
- General reports: Compliance by NAS/CGS/OS, daily logs/statistics, access report
- DNAC reports: Audit and access status for endpoints by subnet
Agent
- Desktop Agent for Windows 98, 2000, XP, 2003, Vista, MacOS X, Linux
- Web Agent for Internet Explorer and Firefox on Windows |
|
| |
|
|
|
|
|
|
|
|
| |
|
|
| |
|
|
|
|
|
|
