Network access control (NAC)

摘要

If one browses any well-known list of security controls, whether they're a regulatory mandate or guid-ance for best practice, some of the same types of controls seem to pop up every time. One of these deals with assurance that the assets attaching to a network (virtually or physically) are indeed authorized. This is simply one of those areas where admins understand the impli-cations, but the impact to the infrastructure prevents them from implementing sufficient controls to help mitigate the threats. If an employee, contrac-tor, third party or any entity for that matter, plugs a machine into any network drop in an organization's environment, are they automatically entitled to start communicating to all of its other network devices? Chances are that in many instances the answer is "yes."