Network Access Control (NAC)
Control non-compliant, unauthorized, and guest computers
Sophos NAC Advanced is a software-based solution for endpoint assessment and control offering the most comprehensive and easy-to-deploy solution available. Sophos gives you the ability to control who and what is connecting to your network.
- Continuous endpoint assessment
- Control of unmanaged computers
- Prevention of unauthorized access
- Central endpoint policy control
- Enhances existing network infrastructure
Preventive and faster protection
Our preventive approach to NAC stops problems before they happen by providing pre- and post-connect assessment of computers with multiple remediation and enforcement options. Our web-based management console allows you to quickly define endpoint security and acceptable use policies for all end-user scenarios. You can detect and fix managed endpoint vulnerabilities before infection, and prevent risk by controlling unmanaged computers, quarantining infected computers and blocking unauthorized computers.
Simplified and automated policy management
The key to success is in the assessment and remediation processes for non-compliant computers. Our management console provides over 1000 pre-defined security application and operating system patch assessment definitions which are automatically updated to reflect security application updates and new security patch availability. The agents can fix out-of-compliance endpoints automatically or with user assistance. Our automated capabilities simplify life for both the administrator and the end users.
Trusted support from the experts
Sophos is committed to unrivaled support. Our global network of experts provides round-the-clock support and updates. Our NAC experts work with your team to develop a plan for efficient deployment and upgrade of Sophos products with minimal impact on your network. Your security team works alongside our experts to optimize administration and policy enforcement, gaining immediate experience of our industry-leading solutions.
Flexible and simple policy creation
Sophos NAC Advanced management console’s extensive policy-building capabilities allow you to define security and acceptable use policies and enforcement actions for as many distinct user groups as you require. The central policy mode control enables you to phase enforcement steps as it makes sense for you – from Report Only, through Remediation, to Enforce – avoiding an all-or-nothing approach. Sophos simplifies NAC policy creation by providing over 1000 predefined applications and operating system patches which you can include in policy with just a click of a mouse.
Comprehensive endpoint assessments
Sophos NAC provides both pre- and post-connect inspection of managed computers using our "always on" persistent agent as well as pre-connect inspection of all unmanaged endpoints with the use of our dissolvable agents. Assessments are extensible and include details of application installed, results of the last malware scan, operating system, service pack, and patch installation, file check, registry key, and running process.
Computers can be granted the appropriate level of access to your network based on multiple contextual factors including user role, access method, and endpoint assessment results. Non-compliant computers can be automatically corrected without quarantine, or quarantined for remediation when end user corrective action is required.
Robust compliance reporting and alerting
Reports include the overall compliance state of each user; details on each user’s session including the compliance status of each application on the computer; details on which computers have been quarantined due to non-compliance and why. Reports can be viewed in real-time to address immediate compliance needs, or with an historical perspective for trending purposes. Alerts can also be easily created to provide timely notification for compliance and enforcement status via e-mail and/or event logs.
Complete protection
Broad overlapping enforcement options including Agent-based, 802.1X, DHCP, Cisco NAC, and VPN can be used to provide complete enforcement coverage both before and during connection, protecting against threats posed by unauthorized, unknown, compromised or misconfigured computers. Sophos NAC Advanced is the proven solution for endpoint assessment and control, offering the only truly vendor neutral and completely software based NAC product which maximizes your existing investment and works with your existing network hardware
In-house expertise means superior support
Every Sophos customer receives superior 24/7 technical support from our in-house global support experts, as standard with every license. As Sophos NAC Advanced is installed with an understanding of each customer's individual environment, Sophos Premium Service is normally required for Sophos NAC Advanced customers.
SophosLabs provides smart detection
Our global network of skilled researchers and analysts use pioneering detection technology to protect businesses from known and emerging threats, such as malware, phishing and spam.
Professional Services help to optimize your security
Our Professional Services packages, delivered by experienced in-house consultants, help to ensure you receive the maximum return on your investment.
All-inclusive license gives you best protection
When you buy a Sophos license, you buy peace of mind: constantly updated software, free updates and upgrades for new releases, and no hidden costs.
Platforms supported
Server
Operating system:
Windows Server 2003
Database:
Microsoft SQL 2000
Agent
Windows 98 SE
Windows 2000
Windows XP
Windows Server 2003
Windows Vista
Compatible network equipment
Alcatel
Aruba Networks
Aventail
Cisco
Checkpoint
Enterasys Networks
Extreme Networks
Foundry Networks
Hewlett-Packard
Infoblox
Juniper Networks
Lucent Technologies
MetaInfo
Nortel
Novell
RSA Security
Sun Microsystems
3Com Corporation
»
|
