Threats to the integrity of your organization's data are as much internal as external. A lot of emphasis of network security policies has been historically placed on how to deal with external Internet-based threats, often neglecting threats that could occur from within the organization's network infrastructure. A 2006 survey conducted on behalf of IBM found that of 600 IT managers, 75% believe that the greatest risks come from within their organisations; in other words, from trusted users.

Network Access Control (NAC) is an optional add-on application from the mApps portfolio which can be installed on the mBox to provide the ability to control which network resources an authenticated user can access based on his or her identity and/or the identity of the connecting device. The identities are vetted before a connection is granted.

NAC integrates RADIUS server technology for authenticating network access and uses the IEEE 802.1x protocol as a communications mechanism with devices wishing to attach to the LAN or WLAN.

The NAC mApp provides an easy-to-use Web-based GUI to centrally manage the configuration of access control across the whole network

Integrated tool to do bulk import of MAC addresses and users compatible with Microsoft Excel

How it Works

The mBox NAC mApp solution evaluates the eligibility of endpoints before they are allowed to access the organization's local area network. The NAC module provides an integrated IEEE 80.1x RADIUS authentication capability and is designed with multiple enforcement modes:

• MAC address based enforcement & authentication
• Username/Password based authentication
• Web browser based enforcement (future)

Msona weaves its Network Access Control solution throughout the enterprise network infrastructure:

Ethernet Switches:

mBox NAC is able to exploit the capabilities of many existing Ethernet switches thus minimising the investment at the same time making the network more secure.

Wireless Access Points:

Lets organisations provide Internet-only access or highly controlled and sophisticated guest access control to vendors, partners, and contractors.