Network Access Control

Impulse Point brings us a new generation of Network Access Control system. Cost effective, simple to implement and manage, easily scaleable, and independent of the underlying network architecture, Impulse Point's Safe•Connect OpenNAC solution enables organizations to quickly implement a robust solution that will automate the enforcement of endpoint security policies. The result is a more secure, reliable, and predictable IT network infrastructure that is easy and cost-effective to deploy and maintain.

The Safe•Connect^TM Architecture

Cost Effective, Simple and Easy to Implement are not words usually associated with network access control. Most NAC systems are architecturally intertwined with the underlying network, they operate by dynamically reconfiguring switches, and are thus inherently complex. They are inline, sitting between the users and the network resources, so represent a single point of failure. The inline architecture implies one unit per location, so scaleability and cost become issues for distributed enterprises. Security assessment is a "once per visit" process, so devices may become a threat after access has been granted.

Impulse Point has a fundamentally different, fundamentally better architecture. Safe•Connect policy enforcers are out of line, so one appliance can support many schools. They operate independently of the network infrastructure, so they are network supplier agnostic, quickly and easily installed, and massively scaleable. Security assessment is a continuous process so endpoint security policy compliance is enforced real-time.

Safe•Connect is available on an appliance, or for VMware.

Safe•Connect Functionality

Safe•Connect operates with almost any end point including devices running Windows 07 and MAC OS X Snow Leopard.

It enables organisations to automate the enforcement of its network security policies. Policy administrators can select from a series of pre-configured policies covering areas such as authentication, guest access, anti-virus / anti-spyware protection, patch maintenance levels, and peer-to-peer file sharing, or create their own bespoke policies using the custom policy builder module. The custom policy builder is sophisticated and flexible enabling the system to be customised to meet a wide range of criteria.

Users or devices not meeting access criteria may be warned, quarantined and re-mediated, or rejected.

Users complying with policy are granted network access appropriate to their group, location, or roles. For example, policies can be set for a particular building (i.e., residential dorm or remote office), a specific department (i.e., research or accounting), or by role (i.e., vendor, staff, student, or guest).

Real-time policy status reports are available to enable monitoring of device, group or individual policy compliance based on IP, MAC Address, User or Group Name. Granular historical database reporting is also available for trending analysis, compliance auditing, and archiving.

Implemented in Hours not Days

Following detailed planning Safe•Connect is delivered preconfigured. Implementation is simple and takes hours not days and weeks.

A rigorous test process is followed to enable sign off, and documentation is provided.

Delivered as an Operationally Managed Service

Safe•Connect is delivered as an operationally managed service. Customers maintain control of policy management and enforcement, Impulse Point take care of the rest.

This includes:

• Continuous monitoring from the Impulse Point Support Centre
• Hardware Maintenance
• Software Maintenance, upgrade management and upgrade installation
• Problem determination and resolution
• Daily policy configuration backup and restoral.

[menu]