{"id":47333,"date":"2022-03-31T09:39:04","date_gmt":"2022-03-31T01:39:04","guid":{"rendered":"https:\/\/version-2.com\/?p=47333"},"modified":"2022-05-30T10:42:18","modified_gmt":"2022-05-30T02:42:18","slug":"cyber-security-essential-2-802-1x-network-access-control","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2022\/03\/cyber-security-essential-2-802-1x-network-access-control\/","title":{"rendered":"Cyber Security Essential #2: 802.1x Network Access Control"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\"\"<\/p>\n\n

Why is 802.1x Network Access Control Essential?<\/strong><\/h3>

802.1x network access control<\/a> is a technology that enables organizations to enact its own unique policy for how and when endpoints (desktops, laptops, smartphones, etc.) can connect to their corporate networks. NAC solutions are typically designed to allow IT security teams to gain visibility of each device trying to access its network, and specifically the type of device and access layer being used (i.e. wifi, wired ports, or VPN).<\/span><\/p>\n

\"\"<\/p>\n

Today, 802.1x network access control<\/a> provides a number of powerful features on top of what it was originally designed for years ago. These include security posture assessments for endpoints, which pinpoints any associated endpoint risks, allowing network security administrators to control network access based on their organization\u2019s risk tolerance threshold.<\/span><\/p>

With the rise of cloud computing, remote workforces, bring-your-own-device (BYOD) policies, and the internet of things (IoT), network access control has become a much more critical part of the larger cybersecurity technology stack at most companies. The technology itself has also evolved quite drastically in response to these emerging trends and their impact on networking and ensuring network security.<\/span><\/p>

Key Functionality to Consider When Deploying a NAC Solution<\/h3>

Network Visibility & Device Discovery<\/h4>

A NAC solution discovers and identifies all devices\/users in the network before they are granted network access, requiring continuous monitoring of the network and devices connected to it. The system enables the discovery, classification and assessment of every device connected to the network. Configuration and security state of every device is monitored, ensuring that the network and devices are compliant to the organizational security policy.<\/span><\/p>

Full Access Layer Coverage<\/h4>

As today\u2019s networks explode in size and scope, particularly with remote workforces on the rise, it\u2019s imperative that your 802.1x network access control solution can manage access control across all existing access layers. This includes the obvious \u2013 wired ports and WiFi. It also must be able to manage the various remote access methods used within your organization. These may include VPN, Teleworker Gateways, and beyond.<\/span><\/p>

Authentication Services<\/h4>

Traditionally, enterprises have enabled network authentication via usernames and passwords. As we now know today, this method of authentication can be easily compromised by bad actors, making it no longer sufficiently secure for enforcing network access control. Any NAC worth its salt should offer several methods for authentication, including: role-based, MAC authentication bypass (MAB), and certificate authority.<\/span><\/p>

Device On-Boarding<\/strong><\/h4>

Business units and even departments (think Finance & Accounting, for example) often have their own VLANs since they\u2019re dealing with very sensitive, confidential data. The task of setting up such VLANs and onboarding new devices<\/a> is just one of dozens of tasks overseen by frequently overburdened IT teams. So, if not done correctly at first, it can open the door to potential network vulnerabilities, such as a person gaining access to a part of the network he\/she should not have the privileges for. At a small scale, managing access manually is often sufficient. For larger organizations, however, this just isn\u2019t sustainable. As a result, many large organizations that don\u2019t have a secure onboarding process will often compromise on network security hygiene.<\/span><\/p>

Policy Configuration<\/strong><\/h4>

Network security teams define and activate access control policies to control device access to the corporate network, which is ultimately based on the device authorization state. Once a device is authorized for network access, a network access policy determines which specific virtual LAN (VLAN) that device or user is directed to. On top of that, the policy also defines, for each type of authorization violation, whether to deny entry or whether to quarantine the device by assigning it to a specific VLAN<\/a> or apply an access control list (ACL).<\/span><\/p>

Endpoint Risk Monitoring<\/strong><\/h4>

Your corporate network is only as strong as its weakest security link. This means continuous risk posture assessment is paramount. By continually monitoring the network, your network and security teams can stay ahead of cyberattacks with the ability to identify new risks in real-time, react to these risks, and take action. In a world with ever-expanding boundaries and an exponential increase in types of endpoints, continuous risk posture assessment must function no matter location, device type, or the type of data being transferred.<\/span><\/p>

Device Remediation<\/h4>

Having a rapid remediation plan in place will not only help prevent further damage or the lateral spread of attacks but also allow for business continuity. Effective endpoint remediation consists of:<\/span><\/p>