Zero Trust Security Leader Brings Lightweight, Easy-to-Use IoT Security Capabilities to the Enterprise and Mid-Market 

Austin, TX – October 12, 2022 — Portnox, a proven leader in cloud-native, zero trust access and endpoint security solutions, today announced the general availability of the first cloud-native IoT security solution to help mid-market and enterprise businesses address rising Internet of Things (IoT) security threats. Now available via the Portnox Cloud, Portnox’s new IoT fingerprinting and profiling capabilities empower organizations to easily and accurately identify, authenticate, authorize, and segment IoT devices across their network to ensure an effective zero trust security posture.

“No organization is immune to the inherent and increasing number of security risks IoT devices pose as they are more susceptible to vulnerabilities and, therefore, prime targets for cyberattacks. Companies of all sizes must properly secure these devices to prevent them from serving as a gateway onto the corporate network by cybercriminals. But as networks become more complex and distributed, and as the number of IoT devices continues to grow, it’s becoming more and more difficult to identify and control access for these devices across a given network, let alone secure them,” said Denny LeCompte, CEO at Portnox.  “As we bring our vision of simplifying access control and endpoint security for mid-market IT teams to fruition, adding a solution for IoT fingerprinting  to our cloud-native platform was the natural next step. Portnox now gives customers full visibility of IoT devices in use across their respective networks.”

Juniper Research predicts that the total number of IoT connections will surge to 83 billion by 2024, while Ponemon Institute found that most (94 percent) organizations think that a security incident related to unsecured IoT devices or applications could be “catastrophic”. Large enterprises are not alone when it comes to rising IoT security headaches – organizations of all sizes are actively trying to strengthen their security postures to account for the surge of threats tied to the rising operational dependence on IoT. With so many IoT devices – printers, cameras, thermostats, sensors, monitors, etc. – now in use across all types of organizations, the ability to automatically onboard and enforce IoT device authentication, control and security policies across the network is mission critical.

Already helping more than 1,000 organizations navigate ever-changing cybersecurity threats, Portnox solutions are purpose-built to be exceptionally easy-to-use, scale, and manage. With the addition of IoT fingerprinting and profiling to the Portnox Cloud, Portnox customers can now enjoy enhanced confidence in the security posture of their network with respect to IoT – without the cost and resource demands associated with traditional on-premise IoT security solutions that can often be complex to configure, deploy, and maintain.

With the latest solution expansion, the Portnox Cloud now provides organizations with:

• Complete device visibility and access policy enforcement across the network for all major device groups – IoT, bring your own device (BYOD) and managed devices
• Enhanced IoT fingerprinting and profiling accuracy powered by artificial intelligence and machine learning
• Strengthened organizational zero trust security postures, accounting for all devices and access layers – on-site and remote

This technology will unlock a tremendous number of additional capabilities, such as automatic policy mapping based on fingerprints and leveraging fingerprinting data to thwart potential MAC Address spoofing risks. Portnox customers can also use fingerprinting information to provide EoL/EoS dates, as well as list potential security vulnerabilities on the endpoint to augment network access and remediation policies.

Portnox continues to rapidly expand its zero trust security offerings across the Portnox Cloud. The company is currently exploring new ways to add agentless risk assessment policy enforcement, as well as data capture options to increase IoT fingerprinting access and automate micro-segmentation and quarantining for IoT devices in future iterations of the solution.

“Providing intelligent insight and visibility into IoT devices connecting to a business’s network with absolutely zero on-prem footprint required is absolutely unprecedented,” said Portnox Vice President of Product Management Jeremy Morrill. “From somewhat basic IP phones, security cameras, printers, TVs and streaming appliances, to complex medical devices and manufacturing equipment, the need for comprehensive IoT security has never been more critical – especially as the proliferation of IP-connected devices continues to accelerate and shows no sign of slowing.”

Effective immediately, IoT fingerprinting and profiling will now be automatically included in Portnox’s NAC-as-a-Service subscription for organizations with 500+ devices. Find more details on pricing packages here or access more product facts here.

With the constant threat of cyberattacks, network engineers and administrators must implement robust security measures to safeguard their networks. One such measure is the Network Access Control List (NACL), a vital component in the arsenal of network security tools. In this comprehensive guide, we’ll delve into what NACLs are, why they are essential, and how they can help thwart cyberattacks. We’ll also explore real-world examples to highlight the importance of implementing NACLs in your network infrastructure.

Understanding Network Access Control Lists (NACLs)

Before we dive into the importance of NACLs, let’s clarify what they are. A Network Access Control List (NACL) is a security feature used in networking to filter traffic and control access to network resources. Think of it as a virtual checkpoint or gatekeeper for your network. NACLs are commonly used in cloud-based environments, such as Amazon Web Services (AWS), and they are essential for enforcing security policies.

Why Network Engineers and Administrators Need NACLs

1. Defense in Depth

Network security is not a one-size-fits-all solution. It requires a multi-layered approach to defend against a wide range of threats. A network access control list play a crucial role in this defense in depth strategy by adding an extra layer of security to protect your network. By setting up NACLs, you can specify rules that determine which traffic is allowed and which is denied. This level of granularity is essential to control access and prevent unauthorized users or malicious entities from infiltrating your network. NACLs allow you to create an additional barrier beyond traditional firewalls and security measures.

2. Granular Control

One of the standout features of NACLs is their ability to provide granular control over network traffic. You can define specific rules to allow or deny traffic based on source IP addresses, destination IP addresses, port numbers, and even protocols. This granular control enables you to tailor your network’s security to your organization’s specific needs.

3. Protecting Sensitive Data

Networks often contain sensitive and confidential data that must be protected at all costs. NACLs are instrumental in safeguarding this data by ensuring that only authorized users or systems can access it. For example, an e-commerce company can use NACLs to restrict access to its customer database to only the systems responsible for processing orders and customer support.

Real-World Examples of NACLs in Action

To better illustrate the importance of NACLs in network security, let’s explore some real-world scenarios where a network access control list could have helped thwart cyberattacks:

1. Preventing Unauthorized Access

Consider a financial institution that stores customer data on its servers. Without NACLs, malicious actors could potentially gain unauthorized access to this sensitive information, leading to a data breach. By implementing NACLs, the institution can restrict access to only trusted IP addresses, making it significantly more challenging for attackers to infiltrate the network.

2. Mitigating DDoS Attacks

Distributed Denial of Service (DDoS) attacks can cripple a network by overwhelming it with a flood of traffic. NACLs can be used to mitigate the impact of DDoS attacks by blocking traffic from known malicious IP addresses. This proactive approach helps maintain network availability and ensures that legitimate users can access resources without disruption.

3. Securing Cloud-Based Environments

In cloud-based environments like AWS, NACLs are essential for securing virtual private clouds (VPCs). In 2020, the SolarWinds cyberattack compromised numerous organizations, highlighting the importance of securing cloud-based resources. Implementing NACLs in VPCs can prevent unauthorized lateral movement within the network and limit the potential damage of such attacks.

4. Protecting Internet of Things (IoT) Devices

IoT devices are often vulnerable to cyberattacks due to their limited security features. NACLs can be used to isolate and secure these devices, ensuring that they can only communicate with authorized servers and services. This prevents attackers from exploiting vulnerable IoT devices to gain access to the broader network.

How to Create Effective NACLs

Now that we understand why NACLs are crucial, let’s explore how to create effective ones:

1. Define Your Security Objectives: Before creating NACLs, establish clear security objectives. Identify what you need to protect and the level of access required for different parts of your network.
2. Create Rules Based on Least Privilege: Follow the principle of least privilege, which means granting only the minimum access necessary for a resource to function. Restrict access to resources to reduce the attack surface.
3. Regularly Review and Update Rules: Network environments are dynamic, and threats constantly evolve. Regularly review and update your NACL rules to adapt to changing security requirements and emerging threats.
4. Monitor Traffic and Logs: Implement robust traffic monitoring and log analysis to detect any anomalies or unauthorized access attempts. Timely detection can prevent potential security breaches.
5. Test NACLs: Before deploying NACLs in a production environment, thoroughly test them in a controlled setting to ensure they function as intended without disrupting legitimate traffic.

Final Thoughts on NCLs

Network Access Control Lists (NACLs) are indispensable tools in the arsenal of network engineers and administrators for enhancing network security. They provide a critical layer of defense in depth, offering granular control and protecting sensitive data. By implementing NACLs, you can prevent unauthorized access, mitigate DDoS attacks, secure cloud-based environments, and protect IoT devices. As cyber threats continue to evolve, NACLs serve as a vital safeguard, helping to thwart potential cyberattacks. Remember to define your security objectives, follow the principle of least privilege, and regularly update and monitor your NACL rules to keep your network safe. NACLs are not a one-time solution; they require ongoing attention and adaptation to stay effective in the ever-changing landscape of network security.