McAfee Network Access Control

McAfee Network Access Control Overview:

Noncompliant, infected, or misconfigured systems pose security risks and incur costs due to system downtime and restoration. Even one infected host already on the network can cause disruptions to network bandwidth or can infect other compliant systems. Boost NAC with McAfee IntruShield® IPS to protect high-risk areas on the network by identifying, quarantining, and remediating infected devices.

Description:

Mobility, mergers and acquisitions, and offshore partnerships mean more greater flexibility but also increased risk. One noncompliant, infected, or misconfigured laptop on your network can cost you significant time and money: system downtime, loss of reputation, regulatory fines, frustrated customers, and IT support for restoring systems.

With the volume of noncompliant systems on your network growing quickly, it’s no wonder that you have so many concerns when it comes to network access control (NAC). Do users with administrative rights disable protection software before or while connected to your network? Are company laptops likely to miss critical security updates or patches while disconnected from the network? How do you identify, quarantine, and remediate infected systems already on your network? What infrastructure

Traditional network access control (NAC) systems promise to scan devices as they try to log onto a network to test their overall security posture. But enterprises are also looking for NAC protection against hidden attacks by monitoring devices after they’ve been granted access.

What’s the answer? McAfee Network Access Control (NAC) mitigates risk to corporate assets posed by systems that don't comply with your security policies. It combines powerful yet flexible policy control with a wide range of enforcement methods to protect your network.

Extend the power of NAC with McAfee IntruShield® IPS solution to protect remote access, high-risk branch offices, and wireless networks from infected workstations, servers, non-Microsoft® Windows, or handheld devices. Identify, quarantine, and remediate attack vectors before they spread. The McAfee ePolicy Orchestrator® management console gives you visibility and reporting on PCs used by guests or contractors, so that you can trigger anti-virus protections or automatically deploy an ePO™ agent to these systems.

Compliance enforcement — In addition to limiting network access for risky systems such as visitor and contractor laptops, you can enforce compliance of managed systems (those with an agent already installed) to ensure users do not disable security tools, install malicious applications, or use outdated security configurations. McAfee ensures that your investments in security tools and policy development are protected and not bypassed or disabled by self-administering users.

Network Access Control software support — McAfee Network Access Control software supports managed users, including employees, contractors, and remote users, and offers employee endpoint health assessments to ensure that managed systems are compliant prior to admission. With the McAfee ePolicy Orchestrator and Network Access Control software, we help you detect rogue and unknown devices, and remediate security issues.

Providing essential Network Access Control functionality — With the integrated McAfee Network Access Control Appliance, you can provide identity-based and application-based access control for unmanaged endpoints, such as guests and contractors. You can also add essential Network Access Control functionality to the McAfee Network Security Platform to implement post-admission monitoring and network enforcement to McAfee’s industry-leading intrusion prevention system.

Benefits and Features:

System Requirements:

The following are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Hardware Requirements:

Use the same hardware as specified for the McAfee ePolicy Orchestrator (ePO) 4.0 server or higher. When adding McAfee Network Access Control, we suggest using the recommended hardware configuration rather than the minimum configuration. For details, see the documentation for ePO 4.0 or higher.

• McAfee ePO 4.0 or higher with Patch 2 installed
• Rogue System Detection 2.0 or higher
• McAfee Network Access Control Client

System Requirements:

• Memory: 512 MB RAM or more
• Operating Systems
  • Windows 7
  • Windows Vista, all versions
  • Windows XP Professional with Service Pack 2 (SP2) or higher
  • Windows 2003 Enterprise Server with SP1 or higher
  • Windows 2003 Standard Server with SP1 or higher
  • Windows 2003 Web Server with SP1 or higher
  • Windows 2000 Professional with SP4
  • Windows 2000 Advanced Server with SP4
  • Windows 2000 Server with SP4
  • Windows 2000 Terminal Services with SP4
  • McAfee Agent 3.6 with Patch 2 or higher

Documentation:

Download the McAfee Network Access Control Datasheet (PDF).