network access control

Network access control (NAC), also called network admission control, is a method of bolstering the security of a proprietary network by restricting the availability of network resources to endpoint devices that comply with a defined security policy.

A traditional network access server (NAS) is a server that performs authentication and authorization functions for potential users by verifying logon information. In addition to these functions, NAC restricts the data that each particular user can access, as well as implementing anti-threat applications such as firewalls, antivirus software and spyware-detection programs. NAC also regulates and restricts the things individual subscribers can do once they are connected. Several major networking and IT vendors have introduced NAC products.

NAC is ideal for corporations and agencies where the user environment can be rigidly controlled. However, some administrators have expressed doubt about the practicality of NAC deployment in networks with large numbers of diverse users and devices, the nature of which constantly change. An example is a network for a large university with multiple departments, numerous access points and thousands of users with various backgrounds and objectives.

Read more about network access control: - Symantec offers a NAC solution.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT NAC vendor Bradford Networks offers simplified product for guest and contractor access NAC vendor Bradford Networks has announced NAC Director GCS, a scaled-down version of NAC Director that manages network access for guests and... What commands allow network traffic to pass through PIX firewalls? The PIX firewall can secure networks but you need to allow access to the right people. Learn which commands get network traffic flowing, from security... Intelligent network switches on the rise as more is expected of the network With businesses expecting their networks to provide more services, vendors are building more intelligence into their switches.