Two leading network access control standards — TCG’s Trusted Network Connect (TNC) and Microsoft’s Network Access Protection (NAP) — will now interoperate, providing enterprises with simpler, more cost-effective, scalable, and interoperable endpoint integrity and network access control.

To improve endpoint and network security, enterprises have been quick to embrace the notion of network access control. The concept is simple: when a device — also known as an endpoint — connects to a network, the user’s identity and the health of the endpoint are checked. If they comply with the network’s policies, access to the network is granted. If not, the endpoint may be remediated by applying the latest patches or scanning for viruses.

By improving endpoint security, companies can better defend against a number of increasingly complex Internet-borne attacks. Attackers — including organized criminal rings — now often utilize advanced malware which combines rootkits, Trojan applications, and operating system backdoors to exploit endpoints and steal sensitive data. Attackers’ goals include extortion, identity theft, fraud, and even corporate espionage. Organizations must respond with more advanced endpoint security to effectively safeguard valuable information, comply with regulations, and avoid costly data breach notifications.

Yet since network access control products came to market, implementers have faced an uphill battle. First, they had to navigate a wide variety of often incompatible appliance, software, and infrastructure-based options. Then they had to select a proprietary approach, attempt to cobble multiple products together into a workable solution, or opt for one of several incompatible network access control frameworks.

As a result, even though network access control is a top enterprise spending priority — Forrester Research reports at least 40 percent of organizations will invest in such technology this year — many organizations have delayed their investments until discussions of network access controls evolve from point technologies to broad frameworks comprising interoperable products that deliver network access control in a cost-effective and scalable manner.

Download pdf Standardizing Network Access Control: TNC and Microsoft NAP to Interoperate