Flexible: The Way NAC Should Be

Freedom of choice. You shouldn’t have to settle for something that almost works or choose between apples and oranges – sometimes you want both.

SafeConnect works for you. SafeConnect provides a flexibility that other solutions can’t and operates completely independent of your network infrastructure. Instead of being forced into using what other NAC providers have decided your NAC should be, SafeConnect gives you the flexibility to run your operation without having to consider switch compatibility, configurations or port settings.

The system provides a host of options that allow you to tailor the system to your needs and environment. The security policies and enforcement options allow you to customize the system based on users, device types or location. Choose different policies and options for different roles and groups … based on your needs. And change those policies easily when your needs change.

You also have the freedom to select and use only the policy modules needed to satisfy the requirements of your security plan. Administrators can implement the policy modules that come standard with the SafeConnect solution including compliance with anti-virus, anti-spyware, Microsoft OS patches, as well as registration and authentication – or can create custom policies based on the existence or non-existence of file types, registry settings, services, and processes on endpoint devices. Other standard policy modules include peer-to-peer file sharing, access points, and power management.

Policy Enforcement Flexibility

The SafeConnect NAC Solution supports academic freedom by providing flexible enforcement options that can be determined by campus location or user identity (i.e. faculty or administrative staff, students, or guests) based on the philosophy of the University.

Multiple enforcement options are available and can be chosen based on the user’s assigned policy group (identity) and the individual policy modules as follows:

Flexible Registration/Authentication Options

• One-time User Authentication and Device Registration
• Initial Device Registration with Periodic Authentication (every login, once a day, once a week, once every thirty days, etc.)

Flexible Endpoint Policy Enforcement Options

• Immediate Quarantine
• Multiple Warnings that result in a Quarantine Condition after a predefined Grace Period
• Periodic Educational Warnings (i.e. one-time, once a day, once every 4 hours, etc.)
• Audit Only – Policies can be assessed and compliance will be viewable my security team, but the end user will not be notified/messaged or quarantined.

For example, guests visiting the campus can be restricted to Internet-only usage for a specific time frame. At the other end of the enforcement range, trusted individuals can be given a “One-time User Authentication and Device Registration Policy” in conjunction with “Audit-only” endpoint policy enforcement, which would effectively exempt them from policy enforcement and notification unless the security team considers their posture a serious threat.

SafeConnect is delivered with the following standard Policy Modules:

• Authentication
• Guest Registration
• Acceptable Use Policy Auditing
• Anti-Virus
• Anti-Spyware
• Microsoft Patch
• Peer-to-Peer (P2P)File Sharing
• Access Point
• Power Management
• Broadcast Messaging
• Custom Policy Builder

You decide how you want to use SafeConnect. We’ll help you do it.