The endpoint struggle.

Many challenges faced by network security managers today

are a direct result of not giving consideration to securing the infrastructure, or creating any access protection or access controls within the infrastructure at the time the infrastructure was deployed. The combination of uncontrolled infrastructure and perimeter-based security has resulted in the model that largely prevails today.

Simply put, if you are inside the perimeter security, you are assumed "safe" and "trusted" and are allowed access to the network infrastructure without any controls. Of course, if you are on the "outside" of the security perimeter, you will need some type of remote-access solution.

Remote-access products are specifically designed to protect against unauthorized access and enable authorized access to the network from a remote location. Once the access has been achieved, however, the network security products still must protect the network resources being remotely accessed.

A problem occurs when accessing an intranet does not require any remote-access scrutiny or authentication. In fact, unless the network has some hardware layer controls in place, or access controls have been implemented at the port level, access to the IP network infrastructure is uninhibited--the way it was designed to work.

When network access is attempted by a laptop or mobile system that has gotten past the receptionist, it represents a threat to the enterprise. Once inside the security perimeter, enterprises using free-core IP services with no controls enable the system to gain access to the network without any scrutiny.

Virtually every network manager is grappling with how to best bring the two together and secure the infrastructure-often described as endpoint access protection or network access control.

There are alternatives and solutions available today that promise to interoperate with emerging initiatives. Here are a few points to keep in mind:

* Keep it in-line as much as possible. Avoid choke points and/or overlays when seeking a solution. Look for solutions that work in-line with your current network hardware.

* Try to find solutions that will fully interoperate with today's existing standards and protocols.

* Look for new and innovative uses of existing infrastructures, like the IP layer and DHCP to controlling access.

* Analyze your enterprise security strategy and confirm all the layers of the IP network protocol are included.

* Consider simple, yet effective (software) infrastructure solutions to avoid having to replace your entire hardware infrastructure.

Grant Asplund is president of MetaInfo, Seattle, Wash.

For more information: rsleads.com/608cn-250