Which network access control in China is doing well

Shanghai Anbing information access control equipment, a manufacturer with better domestic access equipment control, is still relatively good, supports various dumb terminal access, and is currently used by enterprise customers more, pan-terminal access control.

Eliminate illegal access to the Internet.

Efficient access mechanism Standardized network access process 5 Identity Authentication Mechanisms It can take over the network access authority of the network, force the identity authentication of terminals to access the network, and prohibit unauthorized access to the network to ensure that only legitimate terminals can access the network.

Technology access. Support terminals to use the supplicant that comes with the operating system, including IP phone, etc. Support dumb terminal devices and support MAB authentication.

List of trespasses.

After installation, the client is free of setup, and it automatically connects to the network after booting, and supports AD domain Network configuration standardization: provides standard configuration parameters for dozens of types of network devices.

Endpoint Security Evaluation.

Cyber Security Assessment.

IPMAC Binding, Telnet Detection, AD Domain Environment, Detect whether the terminal computer port, IP address, and MAC address are logged in to the AD domain, and determine whether the terminal has network access permissions based on the evaluation results.

Terminal host security assessment.

Remote Desktop Malicious Prevention Operating System Patch Evaluate whether the terminal is installed with malicious software, Windows Firewall, operating system vulnerabilities and other security detections, and determine whether it has network access permissions.

Terminal password security assessment.

Blacklist Password Password Security Detection Guest User Checks whether the terminal computer has enabled guest users, whether the account security policy is enabled, whether the user password is too simple, and determines whether the terminal has network access permissions.

Endpoint application security assessment.

Judgment of network access authority Security evaluation Automatic repair Detect whether the software installed on the terminal computer meets the management requirements, whether the programs running on the computer meet the requirements, and determine whether there is network access authority.

A good plan recommendation can be consulted with Jiangsu Guojun Company.

The network access control system detects the compliance of network access terminals in real time through visualization and automation, minimizes access rights for non-compliant terminals, allows compliant terminals, and continuously detects them. The network access control system recommends the use of the UNINAC network access control system, and its functions are as follows:

1. Automatic discovery of network devices, automatic discovery of access devices, and automatic discovery of network topology;

2. Automatically discover the type of access device, including: terminal operating system, controlled category, and IoT device type;

3. Automatically discover the access mode and location of the device, the connected switch and its port or wireless hotspot;

4. Through multi-dimensional discovery and analysis, the network is fully visualized.

5. Control the access to the access terminal and the user, and carry out security inspection and certification according to its attributes, security status, location and other attributes;

6. For access devices that have passed the security check, grant network access rights to ACL VLANs according to the account or device category.

7. During the use of network resources, the access device continuously monitors the security status of the device and controls any abnormalities.

Liansoft Technology began to do network access control as early as 2004, and the dynamic access control idea of NAC products is consistent with the core idea of zero trust. For example, the architecture of the UNIEMM enterprise mobile security support platform of Liansoft Technology adopts APN gateway, emphasizing service stealth and application layer security tunnel; In 2019, Liansoft Technology launched SDP products; In 2020, UEM's ZTNA zero trust network access products and solutions were launched.

Liansoft Technology has been providing leading solutions such as data leakage prevention, digital watermarking, and multi-network file security transmission, which can be fully integrated into the new zero trust solution to provide enterprises with a stronger defense-in-depth system. <>

It can control users and terminals from the source, and help users reject various attacks such as viruses, worms, network interception, and unauthorized access from the network, and its specific significance is mainly reflected in the following four aspects: First, establish the connection between the device and the user's identity, solve the problem of real-name access to the network, prevent illegal access, and lay a solid foundation for the accurate issuance of follow-up security policies and the tracking of security issues; The second is to help enterprises implement unified security policies; Third, based on the system evaluation results, isolate the endpoints that have not passed the security check (such as not installing antivirus software) and guide them to complete the repair. The fourth is to help enterprises realize role-based resource access control, standardize the use of terminal network resources, and solve problems such as unauthorized access.

Anbing Network Access Control System (ES-NAC) is the first in China to put forward the management concept of pan-terminal device identification and access, and it is also the first network access product to apply fingerprint technology to the perception and identification of dumb terminal devices.

ESNAC is not a security tool, but an infrastructure to solve security management problems, providing a direct support platform for network security, terminal management, and information security management for large institutions. The system is designed with multiple application scenarios such as device identification, compliance network access, identity recognition, policy application, and overall operation and maintenance, and can provide a complete and mature network access authentication system.

The network access control system mainly refers to the use of the network, which must be controlled and allowed by the system to achieve a more secure degree of network application and use, so as to effectively ensure the security of network use.

Identity authentication: Mandatory identity authentication for terminals to access the network, prohibiting unauthorized access to the network, and ensuring that only legitimate terminals can access the network.

When choosing a network access control product, you should consider the following functional points:

Network access management. The administrator can manage, mark, authorize, deny, and delete the computer access network.

Access alarms. For unauthorized and non-compliant computers connected to the network, the system will automatically alarm and prompt the client and the administrator.

Built-in service identification.

Network topology discovery and device type identification, RADIUS server, HA hot standby, DHCP service, etc.

Endpoint authentication is supported.

MAC address, IP address, username and password, machine fingerprint, U-key, smart card, digital certificate authentication, LDAP and seamless domain AD management authentication, mobile phone SMS, real-name authentication, etc.

Cascade support. For large users, VLANs are supported, and the admission server supports distributed cascading deployment.

Security detection. It comes with a default terminal network access security compliance detection library, supports custom compliance detection conditions, supports automatic vulnerability fixing, and antivirus software detection.

Endpoint patch detection.

Evaluate the client's patch installation for qualification, including: operating system (Windows 98 ME 2000 XP 2003 Vista Win7 Win10 Win2008).

Access to smart terminal devices.

Support the access management of handheld, mobile and other intelligent terminals.

Real-time detection of terminal running status.

It can detect the system information of the online user terminal in real time, and automatically block the network and force the installation when abnormal clients are found or uninstalled.

Network Quarantine.

Users who fail to pass the security status assessment can be restricted from accessing the network, and can only access the network after the dangerous terminal reaches the security level.

Generally considering the units to deploy the access control system, the information construction has reached a certain height, the network environment has been built, and there are a variety of network equipment and complex terminal equipment. As the choice of network access control system, it is necessary to consider whether the product supports a variety of network access coercive technologies to adapt to various complex network environments. Therefore, the selection of access control products must be able to adapt to the user's diverse information system environment, and the access control system manufacturer should be able to provide access control solutions in various environments, and try to avoid large-scale network transformation.

Second, high reliability to ensure business continuity Once the user has built the network access control system, it means that all terminals enter the network every day and rely on the solution of the network access control system. It is recommended that you make a reasonable choice based on the size and importance of your network.

3. Complete supporting services and timely response The construction of network access control projects is different from the deployment of gateway-type products, which is only deployed at one point, and when changes need to be made, only one point can be changed. The deployment of the network access control system is related to every terminal and every user in the network, and the lack of deployment experience and blind deployment will inevitably cause a wide range of problems. Therefore, in order to build a good network access control project, it is necessary to have a professional technical service team with rich experience in relevant projects and good risk management.

Like Nanjing Yangtu, it is better, and has been engaged in related industries for many years, not only professional, after-sales but also guaranteed.

Network Admission Control (NAC) is a Cisco-initiated, multi-vendor initiative designed to prevent emerging hacking techniques such as viruses and worms from compromising enterprise security. With NAC, customers can allow only legitimate, trusted end devices (e.g., PCs, servers, PDAs) to access the network, and no other devices to access the network.