Cisco has expanded its Network Admission Control (NAC) offering with a system to improve security at branch offices.
The Cisco NAC Network Module for Integrated Services Routers (ISR) introduces a modular security system that is completely integrated into the network infrastructure.
The NAC Network Module is supported in the Cisco 2800 and 3800 Series Integrated Services Routers.
It protects businesses by authenticating, authorising, evaluating and protecting remote user machines connected via wired or wireless links, prior to granting them access to corporate networks.
Designed for branch offices, the NAC Network Module for Integrated Services Routers resolves potential threats and vulnerabilities locally before they are transferred over the wide-area network (Wan), helping to prevent them from affecting the broader corporate network.
In addition to the ISR network module, Cisco is also enhancing its NAC system with Cisco NAC Profiler, an endpoint-recognition technology that maintains a detailed inventory of networked devices so they can be evaluated before and during their connection to corporate networks.
In particular, the Cisco NAC Profiler enhances the ability of networked devices that are not associated with a particular user (like printers, IP phones, wireless access points, and medical devices) to be identified, authenticated, and then given or denied network access.
It also provides continuous behavioural assessment for post-admission access control.