The network access certification system is not an isolated box, but it must work with other components of the security system, such as firewalls, end-use safety products, and Internet behaviour management."I can't get in."The firewall is..."You can get out. You can stop it."The terminal security handle is..."The terminal is not clean."The network access certification system is deployed in conjunction with firewalls and end-of-pipe security products.
Why connect? Single access does not solve the whole security problem.
Access systems control the access of terminals to the network, but once they are connected to the network, their external access, internal horizontal movement and the end itself are in need of firewalls and terminal safety products."Release"Firewall says"Whatever."Terminal security."I don't know.", leaving a large number of safety blind areas. The value of combined deployments is to connect the capabilities of systems: access systems for identification and compliance, firewalls for access control, end-safe threat detection and feedback, formation"Identification, control, disposal"The closed ring.
Connect to firewall: access result driver access control
Access systems are linked to firewalls, with the core being to synchronize access decisions to firewalls and to make firewalls based"Credibility status of users and equipment". The firewall allows access to office resources, for example, through a certified and compliant terminal; non-compliant or uncertified terminals limit access to the repair network or area of separation. This connection can be achieved by syncing strategy, API interfaces, or VLAN and IP-based mapping. Even after connecting, the firewall can still be fine-tuned according to user identity and region, with significant security improvements.
Connect with terminal security: close threat disposal
The terminal safety products (toxication, EDR etc.) are responsible for detecting the terminal virus, malign process and security incidents. Access to the terminal security system is linked to the end security system, which allows automatic disposal of threats: an equipment is detected by the end safe infecting malicious software, synchronizing information to the access system, immediately dewiring or isolating the end to prevent its horizontal transmission within the network; and when the terminal is repaired, access is reassessed."I've got a threat."and"Dealing with threats"You are connected, not by artificially cutting the network after discovery.
Synergy with systems such as the management of online behaviour
In addition to firewall and terminal security, access systems often work with web-based behaviour management, NATSHEL_LOG_AUDIT, etc. The Internet behavior management focus on user compliance, which allows and allows user connection, bringing user identification information into the conduct management, and achieving a by-person audit; The NATSHEL_LOG_AUDIT system allows for the integration of access logs and firewall logs, end-of-pipe security logs, and the analysis of safety incidents. The key to multisystem coordinated deployment is to connect identity and incident data to allow the same user and the same device to be identified and traced centrally across systems rather than separately per system.
Attention to combined deployments
Multisystem connectivity requires particular attention to a number of points: first, interfaces and compatibility, compatibility between different products from the manufacturer, pre-positioning; second, alarm storms, increased security incidents following association, with incident classification and filtering mechanisms to avoid flooding of normal dimensions; third, boundaries of authority, minimum access to inter-system connection accounts and avoidance of exposure between safety systems; fourth, regression mechanisms, link failure, which can lead to downgrading of systems without major areas being made unconnected or interrupted by linkage failures.
Network access certification system combined with products such as firewalls, terminal security, etc., essentially from"Single-point capability"Upgrade To"System capacity"Access to tube portals, firewalls flow, and terminal security threats. Three people combine to form a closed loop through data access and strategy.