Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint Security: 6 Questions To Ask Before You Buy: Page 6 of 8

  • Some vendors offer multiple agents but with different capabilities and OS support. For example, Nevis Networks offers an Active X control for Windows that will perform its health assessments. For non-Windows clients, Nevis can only do minimal identity controls using an agentless connection.

    Recommendations:

  • If you need Mac OS support for thick agents, look at solutions from AEP, Infoexpress and Lockdown Networks. Symantec's on-demand agent runs on Mac OS and Linux, but their thick agents only work on Windows 2000 and XP. Symantec and Consentry have promised them for later this year.
  • Lockdown and Mirage Networks take things a step further: both companies place each endpoint on its own private VLAN, thereby ensuring that risky devices remain isolated from others.
  • For completely agentless approaches, look at Forescout and Vernier.

    5) Do you have non-PC endpoints to manage?

    Part of figuring out the agent landscape is in knowing what else is on your network and what you need to manage. Thick agents can't manage non-PC devices that are on the corporate network and that run their own operating systems, such as print servers, network cameras, PDAs and the like. Most of these devices have IP addresses and run their own operating systems, but can't be easily controlled by the endpoint appliance.

    The most appropriate architecture to handle non-PC endpoints is the TNC approach, which will embrace the widest selection of gear. NAC will implement support for non-PC endpoints at the network layer, while with Microsoft's NAP you'll need to specify policies to handle these devices.