First:
Firewall.
Later:
(c) Access to the Internet behavioural management.
Later:
Fort-Backer, VPN, terminal control, antivirus.
Systems are growing.
But when security incidents really occurred, they found:
Logs are in different systems.
Accounts are in different systems.
The strategy is in different systems.
Security personnel need to move back and forth between multiple platforms.
Looks like it.“There's a lot of equipment.”The actual rule“System deficit”。
The real problem is not the lack of equipment, but the lack.“Unified identity”
Most safety products address a certain type of risk:
Firewalls to resolve borders
Terminal Control Solutions
Fortress machine handles the carrier.
However, there is often no unified identity between these systems.
And so there was:
An employee.
The firewall is a set of accounts.
It's a set of accounts at VPN.
Wireless is a set of accounts.
Security personnel will never be able to answer a simple question:
What kind of authority does this man have on the company network?
The value of corporate wifi network Portal certifications is beginning to emerge here.
II. Portal certification is not given“Online”It's for you.“Unity of identity”It's for.
In mature structures:
Whether the staff is wireless or not.
It's wired.
Company VPN
Remote office
As a first step, all companies are to be certified as the wifi network Portal or from the same identity source.
That is:
Every connection that appears on the network,
There is a common identity system behind it.
From this moment on, the security system is in place.“Alignment”Bases.
III. SECURITY CONSTRUCTION FROM“Stack of products”Changed“Base”
After having a unified identity:
Firewall strategy can be sent by account number
NAC strategy can be sent by character.
The fort machine strategy can be controlled by the same account number.
The logic of security construction has changed:
Not every system has its own account.
It's a common ground.
The enterprise wifi network Portal certified that it was the bottom entrance role.
IV. Access Controls from“Based on IP”Upgrade To“People-based.”
Traditional strategies:
192.168.1.0/24 Access to server A is permitted.
The question is:
IP will change.
Terminals will be replaced
Under the Harmonized Certification System:
The strategy can be:
Financial role → Accessible server A
General staff → Access denied
Doesn't care how IP changes.
Access control start.“- I'm walking with my hands tied.”。
V. SECURITY AUDIT“Device Log”Upgrade To“Personnel conduct”
Previous audits:
See:
An IP access to a server
Some port is connected
But I don't know who.
Under the enterprise wifi network Portal certification system:
There is also a log:
Account
Terminal
IP
Time
Security incidents are investigated with completely different efficiency.
VI. WHAT A COMPANIES REALLY NEED“Vertically connected”Security system
The problems with the security system are:
Many systems in horizontal stacks.
It's not vertical.
The unified identity + Portal entrance, which addresses the vertical problem.
Staff access → Identification
Visits resources → Permissions
Operational Behaviour → Audit of records
Form a closed ring.
VII. WHY INTEGRATION COMPETENTS ARE IMPORTANT TO THIS POLICIES
Because the client is no longer satisfied with:
Buy a device.
It's hope:
The package is still in place after three years.
The NATSHEL_BRAND deep-farm network certification and billing area has evolved over 22 years of its unified accreditation, network access, Authentication & Billing, auditing and other products around which it is based.
For the integrated agent:
This is a long-term replicable programme capacity.
VIII. Enterprise Wifi network Portal certification, which is being processed from“Function Options”Changed“Core security architecture”
When the enterprise begins to build a security system with identity, Portal certification is no longer an access module but a core entry point.
This is also the reason why more and more projects are being developed, requiring certification of enterprise wifi network Portal at the project stage.