IT directors will have to select niche IT providers to ensure their networks run the latest in cutting edge security, or wait up to two years before mainstream suppliers are ready.
In his conference session, Gartner analyst Neil Rickard discussed five emerging areas of network security: instant messaging, network access control, 802.1x, proxy caches and SSL virtual private networks.
"Unfortunately we are not in a position where we can wait for this [technology] to mature," Rickard warned. He said security was not an area of IT where users could wait two years for a major supplier to get it right. "In two years you can have an awful lot of damage done to your enterprise."
Rickard advised users to consider smaller, less mature suppliers for the more cutting edge capabilities. "You are going to be investing tactically. It is a fast-moving market: protocols will change and architectures will change. Expect there to be integration challenges."
Companies will need to integrate multiple systems such as directories and Lan and Wan infrastructure, he said.
Emerging areas of network security
- Network access control provides a way to limit access to the network. It can ensure only devices with the right level of patches and anti-virus signature can connect. Users should also provide a way for non-compliant devices to connect to a quarantine area of the network, where faulty devices can be repaired.
- Reverse caches are used to improve the performance of external websites by holding frequently accessed content. A reverse proxy cache can shield the primary server from the internet and provide content filtering.
- SSL VPNs allow companies to be much more precise over what access they give end-users, compared to the popular approach to remote access based on IP VPNs.
- Instant messaging can enforce policy, run virus scans, authenticate users from a directory service and provide a degree of content filtering. But users need to consider how to audit instant messaging sessions. However, audits could generate vast quantities of data and fall foul of data and privacy legislation.
- 802.1x is the protocol used to provide access control on wireless local area networks. The protocol can also be used on fixed Ethernet network connections. But again, users will need to integrate products themselves.