Cisco Systems has launched a new initiative to address the increased threat and impact of worms and viruses to networked businesses. The Cisco Network Admission Control program, which was developed in partnership with Network Associates, Symantec, and Trend Micro, aims to ensure that network access is provided only to compliant and trusted endpoint devices (for example, PCs, servers, personal digital assistants) and can restrict the access of non-compliant devices.
In its initial phase, the Cisco Network Admission Control functionality enables Cisco routers to enforce access privileges when an endpoint attempts to connect to a network. This decision can be based on information about the endpoint device such as its current anti-virus state and operating system patch level. Network admission control systems allow non-compliant devices to be denied access, placed in a quarantined area, or given restricted access to computing resources. Cisco Network Admission Control systems will initially support endpoints running Microsoft Windows NT, XP and 2000 operating systems.
A “Cisco Trust Agent,” which will resides on an endpoint system, will collect security state information from multiple security software clients, such as anti-virus clients, and communicates this information to the connected Cisco network where access control decisions are made and enforced. Cisco has licensed its Cisco Trust Agent technology to Network Associates, Symantec and Trend Micro so it can be integrated with their security software client products.
Cisco plans to support the Network Admission Control functionality in its access and mid-range routers in mid-2004. The technology will be extended across multiple Cisco product platforms, including switches, wireless access points and security appliances in future releases.
http://www.cisco.com
