Ciscohas expanded itsNetwork Admission Control (NAC)offering with a system to improve security at branch
offices.
The Cisco NAC Network Module for Integrated Services Routers
(ISR) introduces a modular security system that is completely
integrated into the network infrastructure.
The NAC Network Module is supported in the Cisco 2800 and 3800
Series Integrated Services Routers.
It protects businesses by
authenticating, authorising, evaluating and protecting remote
user machines connected via wired or wireless links, prior to
granting them access to corporate networks.
Designed for branch offices, the NAC Network Module for
Integrated Services Routers resolves potential threats and
vulnerabilities locally before they are transferred over the
wide-area network (Wan), helping to prevent them from affecting the
broader corporate network.
In addition to the ISR network module, Cisco is also enhancing
its NAC system with Cisco NAC Profiler, an endpoint-recognition
technology that maintains a detailed inventory of networked devices
so they can be evaluated before and during their connection to
corporate networks.
In particular, the Cisco NAC Profiler enhances the ability of
networked devices that are not associated with a particular user
(like printers, IP phones, wireless access points, and medical
devices) to be identified, authenticated, and then given or denied
network access.
It also provides continuous behavioural assessment for
post-admission access control.