network access control: lessons learned

http:://strominator.com 1

Network Access Control:

Lessons Learned

For AITP/STL November meeting

David Strom, http://strominator.com

(310) 857-6867

http://strominator.com/

2http://strominator.com

What you’ll learn today

• Four successful deployments

• Seven requirements

• Five common pitfalls


Five common NAC pitfalls

• Trying to protect everyone at once

• Failing to understand how many PCs really need remediation

• Having too many sources of security policies around your network

• Believing NAC works across your entire OS population

• NAC can introduce significant login delays


Our four case studies

Product Site No. of clients

Microsoft Forefront Security

Allina Hospital, Minneapolis MN

23,000

Sophos Endpoint Control

TechTeam Global, Detroit 60 now, eventually 1,400

Still Secure SafeAccess A major multinational cosmetics corporation, NYC

20,000

Wave Systems Embassy Trust Suite, TNC

Papa Ginos Restaurants, Boston

250


Multinational cosmetics company


Pre-deployment NAC guidance for managers

• I have found based on my interviews several things that our IT managers have learned and hope you can avoid their mistakes too!


1. Support for non-XP clients is spotty


2. Remediation isn’t easy


3. You can’t protect everything


4. Centralize security policy management


5. Start with simplest elements


6. Pick your pilot group carefully


7. Decide whom you want to authenticate: PCs or users?


Summary and conclusions

• NAC can be useful and successful with the right planning

• Match the product and strategy to your particular circumstances and test carefully

• Take it in baby steps, but keep your eye on the (eventual) remediation ball


Got questions?

Thanks for listening!David [email protected](310) 857-6867

network access control: lessons learned

Documents

remediation isnt easy

networkbelieving nac

endpoint security

common nac pitfallstrying

predeployment nac guidance

security policy managementhttp

sources of security

new technology