Network Access Control (NAC)

Endpoint assessment and control - How much control do you want?

Prevent security issues by assessing and controlling all managed and unmanaged computers using Network Access and Control (NAC) capabilities within Sophos products. Sophos software will enable you to:

• detect and fix managed endpoint vulnerabilities
• ensure that any guest computers match your security requirements before they access your network
• prevent unauthorized computers from accessing the network.

Choose how much control you want:

• Endpoint Security and Data Protection includes integrated NAC which gives you fundamental control of the security status of managed and unmanaged computers.
• Sophos NAC Advanced is an an additional software option which gives you greater control through more sophisticated policy definitions, and advanced reporting capabilities.

Which NAC product is right for you?

Endpoint Security and Data Protection

Sophos NAC Advanced

Policy definition
Policies for managed, contractor and guest computers
Check if antivirus and other security applications are active and up to date
Check if OS service packs are current
Check if Microsoft/Windows Update active
Check 600 predefined OS patch definitions
Define policies by user groups
Create custom applications and policies
Assessment and remediation
Assess and autoremediate managed computers with a permanent NAC agent
Assess and control unmanaged computers with a dissolvable agent
Reporting
Standard reporting on endpoint compliance with policy
Advanced reporting and exporting capabilities for trending analysis
Configurable alerting to proactively track down potential problems
Enforcement
Agent Based - control managed computer network access
Microsoft DHCP - prevent unprotected / unauthorized computers accessing the network
802.1x, Cisco NAC, VPN, other DHCP - prevent unprotected / unauthorized computers accessing the network
Deployment
Single installation with Sophos Anti-Virus and Client Firewall
NAC agent that can be installed on managed computers running third party anti-virus
NAC agent that can be installed separately using software distribution tools