Anti-virus software targets access control

Anti-virus software rivals McAfee and Symantec are going toe-to-toe again as they both unveiled network access control products at the RSA Conference in San Jose, Calif. last month.

McAfee’s Policy Enforcer will include Windows-based desktop client software to let customers enforce end-point security by having the Windows-based Policy Enforcer server check for updated patches, anti-virus, firewall and unauthorized applications before allowing a user onto the network. The server component also will be available as a software module that can run in McAfee’s management console, ePolicy Orchestrator.

The goal is not just to enforce patch and anti-virus updates, says Eric Winsborrow, McAfee vice-president of product marketing. “We’re also going to be able to check for the existence of infections like Sasser or Zotob or botnets before allowing the machine onto the network.”

If a desktop doesn’t pass inspection, Policy Enforcer will quarantine it to facilitate a remediation process so that the user can meet the security policy and gain admittance to the network. McAfee’s product also will include a Windows-based scanner to perform network discovery and determine what devices are coming onto the network.

Symantec is targeting the same segment with it’s Symantec Network Access Control Enforcer appliance, a hardware-based version of the Sygate Enterprise Protection software product it received through the acquisition of Sygate Technologies last year.

The appliance will include a desktop software agent for Windows-based computers that will perform a wide variety of host integrity checks, says John Brody, senior director of product management.

Network Access Control Enforcer will check for anti-virus and ensure that required software patches are installed.

Whether deployed on a LAN segment or behind the VPN gateway, it also will be able to scan machines that may not have the host-based agent on it.

McAfee and Symantec each has its own approaches to network access control, but the question arises how their products may fit into the Cisco and Microsoft technical frameworks. Cisco’s Network Admission Control (NAC) relies on Cisco switches and routers as the policy enforcement point. Microsoft’s Network Access Protection (NAP) is in beta with Vista.

Symantec and McAfee both say their products do support Cisco’s NAC and they intend to support Microsoft NAP as the beta-testing program for it concludes, probably later this fall. Both also say they will back the Trusted Network Connect specification from the Trusted Computing Group.

QuickLink: 062265

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now