Cisco Network Admission Control, Volume I
Cisco Network Admission Control, Volume I

Author: Denise Helfrich

Publisher: Pearson Education

Published: 2006-12-08

Total Pages: 277

ISBN-13: 0132796880

DOWNLOAD EBOOK

Cisco Network Admission Control Volume I: NAC Framework Architecture and Design A guide to endpoint compliance enforcement Today, a variety of security challenges affect all businesses regardless of size and location. Companies face ongoing challenges with the fight against malware such as worms, viruses, and spyware. Today’s mobile workforce attach numerous devices to the corporate network that are harder to control from a security policy perspective. These host devices are often lacking antivirus updates and operating system patches, thus exposing the entire network to infection. As a result, worms and viruses continue to disrupt business, causing downtime and continual patching. Noncompliant servers and desktops are far too common and are difficult to detect and contain. Locating and isolating infected computers is time consuming and resource intensive. Network Admission Control (NAC) uses the network infrastructure to enforce security policy compliance on all devices seeking to access network computing resources, thereby limiting damage from emerging security threats. NAC allows network access only to compliant and trusted endpoint devices (PCs, servers, and PDAs, for example) and can restrict the access of and even remediate noncompliant devices. Cisco Network Admission Control, Volume I, describes the NAC architecture and provides an in-depth technical description for each of the solution components. This book also provides design guidelines for enforcing network admission policies and describes how to handle NAC agentless hosts. As a technical primer, this book introduces you to the NAC Framework solution components and addresses the architecture behind NAC and the protocols that it follows so you can gain a complete understanding of its operation. Sample worksheets help you gather and organize requirements for designing a NAC solution. Denise Helfrich is a technical program sales engineer that develops and supports global online labs for the World Wide Sales Force Development at Cisco®. Lou Ronnau, CCIE® No. 1536, is a technical leader in the Applied Intelligence group of the Customer Assurance Security Practice at Cisco. Jason Frazier is a technical leader in the Technology Systems Engineering group for Cisco. Paul Forbes is a technical marketing engineer in the Office of the CTO, within the Security Technology Group at Cisco. Understand how the various NAC components work together to defend your network Learn how NAC operates and identifies the types of information the NAC solution uses to make its admission decisions Examine how Cisco Trust Agent and NAC-enabled applications interoperate Evaluate the process by which a policy server determines and enforces a policy Understand how NAC works when implemented using NAC-L2-802.1X, NAC-L3-IP, and NAC-L2-IP Prepare, plan, design, implement, operate, and optimize a network admission control solution This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks. Category: Cisco Press–Security Covers: Network Admission Control 1587052415120506

Cisco Network Admission Control, Volume II
Cisco Network Admission Control, Volume II

Author: Jazib 5459

Publisher:

Published: 2006

Total Pages: 624

ISBN-13:

DOWNLOAD EBOOK

Cisco Network Admission Control Volume II: NAC Framework Deployment and Troubleshooting The self-defending network in action Jazib Frahim, CCIE® No. 5459 Omar Santos David White, Jr., CCIE No. 12,021 When most information security professionals think about threats to their networks, they think about the threat of attackers from the outside. However, in recent years the number of computer security incidents occurring from trusted users within a company has equaled those occurring from external threats. The difference is, external threats are fairly well understood and almost all companies utilize tools and technology to protect against those threats. In contrast, the threats from internal trusted employees or partners are often overlooked and much more difficult to protect against. Network Admission Control (NAC) is designed to prohibit or restrict access to the secured internal network from devices with a diminished security posture until they are patched or updated to meet the minimum corporate security requirements. A fundamental component of the Cisco® Self-Defending Network Initiative, NAC enables you to enforce host patch policies and to regulate network access permissions for noncompliant, vulnerable systems. Cisco Network Admission Control, Volume II, helps you understand how to deploy the NAC Framework solution and ultimately build a self-defending network. The book focuses on the key components that make up the NAC Framework, showing how you can successfully deploy and troubleshoot each component and the overall solution. Emphasis is placed on real-world deployment scenarios, and the book walks you step by step through individual component configurations. Along the way, the authors call out best practices and tell you which mistakes to avoid. Component-level and solution-level troubleshooting techniques are also presented. Three full-deployment scenarios walk you through application of NAC in a small business, medium-sized organization, and large enterprise. "To successfully deploy and troubleshoot the Cisco NAC solution requires thoughtful builds and design of NAC in branch, campus, and enterprise topologies. It requires a practical and methodical view towards building layered security and management with troubleshooting, auditing, and monitoring capabilities." -Jayshree V. Ullal, Senior Vice President, Datacenter, Switching and Security Technology Group, Cisco Systems® Jazib Frahim, CCIE® No. 5459, is a senior network security engin...

Network Access Control For Dummies
Network Access Control For Dummies

Author: Jay Kelley

Publisher: John Wiley & Sons

Published: 2009-04-13

Total Pages: 340

ISBN-13: 0470501340

DOWNLOAD EBOOK

Network access control (NAC) is how you manage network security when your employees, partners, and guests need to access your network using laptops and mobile devices. Network Access Control For Dummies is where you learn how NAC works, how to implement a program, and how to take real-world challenges in stride. You’ll learn how to deploy and maintain NAC in your environment, identify and apply NAC standards, and extend NAC for greater network security. Along the way you’ll become familiar with what NAC is (and what it isn’t) as well as the key business drivers for deploying NAC. Learn the steps of assessing, evaluating, remediating, enforcing, and monitoring your program Understand the essential functions of Authentication, Authorization, and Accounting Decide on the best NAC approach for your organization and which NAC policies are appropriate Discover how to set policies that are enforceable and reasonable enough to be followed, yet still effective Become familiar with the architectures and standards essential to NAC Involve and motivate everyone in the organization whose support is critical to a successful implementation Network Access Control For Dummies shows you the steps for planning your implementation, who should be involved, where enforcement should occur, and much more. When you flip the switch, you’ll know what to expect.

Cisco Network Admission Control
Cisco Network Admission Control

Author: Jazib Frahim

Publisher: Cisco Press

Published: 2007

Total Pages: 0

ISBN-13: 9781587052255

DOWNLOAD EBOOK

Secure the network edge with the premier book on Network Admission Control (NAC) deployment and management. By highlighting what protection NAC provides when a virus outbreak occurs, this book is a guide for any network professional who manages network security and monitors organizational infrastructure for day-zero threats.

Cisco Network Admission Control
Cisco Network Admission Control

Author: Denise Helfrich

Publisher: Cisco Systems

Published: 2007-01

Total Pages: 244

ISBN-13: 9781587052415

DOWNLOAD EBOOK

Cisco Network Admission Control Volume I: NAC Framework Architecture and Design A guide to endpoint compliance enforcement Today, a variety of security challenges affect all businesses regardless of size and location. Companies face ongoing challenges with the fight against malware such as worms, viruses, and spyware. Today’s mobile workforce attach numerous devices to the corporate network that are harder to control from a security policy perspective. These host devices are often lacking antivirus updates and operating system patches, thus exposing the entire network to infection. As a result, worms and viruses continue to disrupt business, causing downtime and continual patching. Noncompliant servers and desktops are far too common and are difficult to detect and contain. Locating and isolating infected computers is time consuming and resource intensive. Network Admission Control (NAC) uses the network infrastructure to enforce security policy compliance on all devices seeking to access network computing resources, thereby limiting damage from emerging security threats. NAC allows network access only to compliant and trusted endpoint devices (PCs, servers, and PDAs, for example) and can restrict the access of and even remediate noncompliant devices. Cisco Network Admission Control, Volume I, describes the NAC architecture and provides an in-depth technical description for each of the solution components. This book also provides design guidelines for enforcing network admission policies and describes how to handle NAC agentless hosts. As a technical primer, this book introduces you to the NAC Framework solution components and addresses the architecture behind NAC and the protocols that it follows so you can gain a complete understanding of its operation. Sample worksheets help you gather and organize requirements for designing a NAC solution. Denise Helfrich is a technical program sales engineer that develops and supports global online labs for the World Wide Sales Force Development at Cisco®. Lou Ronnau, CCIE® No. 1536, is a technical leader in the Applied Intelligence group of the Customer Assurance Security Practice at Cisco. Jason Frazier is a technical leader in the Technology Systems Engineering group for Cisco. Paul Forbes is a technical marketing engineer in the Office of the CTO, within the Security Technology Group at Cisco. Understand how the various NAC components work together to defend your network Learn how NAC operates and identifies the types of information the NAC solution uses to make its admission decisions Examine how Cisco Trust Agent and NAC-enabled applications interoperate Evaluate the process by which a policy server determines and enforces a policy Understand how NAC works when implemented using NAC-L2-802.1X, NAC-L3-IP, and NAC-L2-IP Prepare, plan, design, implement, operate, and optimize a network admission control solution This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks. Category: Cisco Press–Security Covers: Network Admission Control 1587052415120506