Lumension Network Access Control (NAC) Integrator

Overview:

With an increasingly mobile workforce and the growth in outsourcing, there are more unmanaged endpoints than ever before that now require access to enterprise networks. Even with the deployment of a vast array of endpoint security solutions, all it takes is one non-compliant endpoint to compromise your network. By enforcing security policies at the point of entry and quickly and automatically bringing endpoints back into policy compliance, you can significantly strengthen your security posture – without impacting business productivity.

Lumension NAC Integrator
Online Flash Overview (Pop-up Window will open)

Automated Assessment and Remediation of Endpoints for NAC Solutions

Lumension NAC Integrator is an add-on component to Lumension ® Patch and Remediation that ensures non-compliant endpoints blocked by your access control solution can be automatically reformed back into policy compliance, allowing end users to quickly gain access to the resources and information they need to remain productive.

Lumension’s NAC integration solution supports current and emerging NAC frameworks and enables you to define the minimum vulnerability management policies that must be attained on each endpoint before it is granted network access. These access control policies can be enforced globally across the enterprise or down to individual group levels.

Lumension NAC Integrator enables:

Definition of policies that must be attained by all machines before network access is granted
Policy compliance assessment for endpoints attempting to gain network access »»Automatic remediation of endpoints that are not compliant with the policy
Post-remediation granting of network access
Reduced network risk and minimized cost and NAC implementation time

Key Features

Supports Leading NAC Solutions
Comprehensive Assessment of IT Assets
Automated Remediation Across Heterogeneous Environments
Enforce Mandatory Baselines
Flexible Policy Definitions
Rapid Implementation
Flexible Reporting
Highly Scalable

Key Benefits

Ensures Policy Compliance for All Endpoints Accessing the Network
Automatically Remediates Any Endpoints Not in Compliance
Minimizes End User Downtime from Network
Reduces TCO by Saving IT Operations Time and Effort

How Lumension NAC Integrator Works

Lumension NAC Integrator works in conjunction with Lumension Patch and Remediation and with you current NAC solution to ensure endpoints are quickly brought back into compliance with network access policies so your network is secured and your end users remain productive.

1. Endpoints attempt to gain access to the network.

2. Comprehensive agent-based scan proactively assesses applications, operating systems and configurations before access is granted. Endpoints are blocked from gaining access due to non-compliance with network access policies.

3. If network access is denied, endpoints are automatically remediated based on defined policies.

4. Endpoints that have been remediated back into policy compliance can now access the network.

Key Features:

Comprehensive Assessment of IT Assets Provides in-depth assessment of vulnerabilities, patch status, security configurations, installed software, and hardware inventory.	Enables Visibility into Enterprise Environment Gain a comprehensive understanding of your security posture for all managed endpoints.
Automated Remediation Vulnerability audits and remediation of security configurations, OS and application vulnerabilities, null passwords, patch-level related vulnerabilities, known hacking tools, malware, common worms, and P2P software checks on Windows platforms, POSIX and infrastructure devices.	Enhances Security Posture and Reduces TCO Broad vulnerability assessment and remediation ensures compliance with network access policies, optimizes IT operations, provides better security posture and reduces TCO.
Flexible Policy Definitions Creates enterprise-wide policies that must be met by every machine attempting to access your network, or group level policies to meet the unique needs of various departments within the organization.	Increases IT Efficiency and End-User Productivity Granular policy definition allows organizations to create policies that are appropriate for different departments to ensure high level accuracy and productivity.
Enforce Mandatory Baselines Enforce policies to ensure that all endpoints are remediated into compliance before network access is granted.	Ensures Compliance and Increases Your Security Posture Ensures that all your systems meet a mandatory baseline policy – a key aspect of corporate security and regulatory compliance.
Rapid Implementation By leveraging your existing Lumension Patch and Remediation implementation, you can significantly reduce the set-up and deployment period for your NAC solution.	Reduces Deployment Time and Costs Leverages current infrastructure to quickly remediate endpoints per NAC policies and enable your end users to remain productive, ensuring that deployment effort and costs are minimized.
Flexible Reporting More than 20 reports that provide detailed information about the patch and remediation management process, including agent policy status, vulnerability deployments, asset inventory and more.	Provides Comprehensive Visibility Provides insight into the security status of the organization. Ensures Audit Readiness Rapidly respond to internal or regulatory compliance requirements.
Highly Scalable Complete coverage for the largest worldwide networks with high availability topologies and distribution point architecture. Packages are cached locally, minimizing network traffic and optimizing bandwidth utilization.	Adapts to Your Growing Business Leverages your current network infrastructure in order to lower TCO from day one of implementation through the life of the subscription. Adapts to various organizational setups, so you can always integrate the scanner into new business structures. Ensures inventory and management of both physical and virtual environments from one consolidated console.

Technical Requirements :

Operating Systems

Server: Windows Server 2003 with Microsoft SQL Server 2005 and .NET Framework
Client (Agents): Windows 2000, Windows Server 2003, Windows XP, Windows Vista, Windows Server 2008

Additional System Requirements

Lumension Patch and RemediationTM version 6.2 – 6.4 (formerly PatchLink UpdateTM) Windows Agent with .NET 2.0 framework
.NET Framework requires Windows Installer version 3.0

Supported NAC Frameworks

Cisco NAC Appliance, Cisco Clean Access or Cisco NAC Framework 2.0
Bradford Networks NAC Director or Campus Manager
Forescout CounterACT
Juniper Unified Access Control (UAC)

Documentation:

Download the Lumension Network Access Control (NAC) Integrator Datasheet (PDF).