Extreme Networks wants to put the lid back on the security issues that were blown off the Dynamic Host Configuration Protocol (define), a security approach to assigning dynamic IP addresses to devices on a network.
Last summer at the Black Hat Conference, Insightix CTO Ofir Arkin explained how DHCP-based approaches provide incomplete detection of elements operating on a network. The DHCP NAC implementation approach can also be bypassed by assigning a static IP address, he added.
Now, Extreme Networks wants to help with the release of a new networking operating system ExtremeXOS 11.6, the proprietary embedded networking operating system that runs on Extreme Networks' switches and other networking equipment.
With ExtremeXOS 11.6, the company is claiming that DHCP-based methods
of enforcement can be done securely by offering users another alternative to
the the port-based 802.1x protocol, which is sometimes difficult to implement and typically more costly.
NAC | Windbreaks and Wildlife::
of a windbreak for protection from weather extremes relates to several factors, For example, are there obstacles or concerns that need new solutions?
http://www.unl.edu/nac/brochures/ec1771/index.htmlHOME |
Avaya, Extreme unite on converged nets - Network World::
Avaya and Extreme Networks last week said they are partnering to deliver customers a new option for building end-to-end converged IP networks and to develop
http://www.networkworld.com/news/2003/1110extreme.htmlHOME |
"We absolutely are proponents of 802.1x , but we also realize it's maybe not
for everybody," Tim Bardzil, product manager at Extreme Networks, told
internetnews.com. "What we're saying now is that we can provide
equivalent switch level enforcement for port level enforcement regardless of
whether the customer chooses DHCP or 802.1x."
Bardzil explained that switches are already aware of DHCP traffic but all
they normally do is just let it pass through. With ExtremeX06 11.6, rather
than just forwarding it along, it peeks inside the packet and sees
the IP address that is being assigned to a particular end point.
FinancialContent.com - Stock Quotes and Business News::
Extreme Networks(R) upgraded NAC solution and new Extreme Networks Policy For greater scalability and reliability of NAC, Sentriant AG now supports load
http://finance.7online.com/abc?Account=wabc&ChannelID=3197&GUID=2687379&Page=MediaViewerHOME |
NACs dirty little secrets revealed by early adopters - Network World::
about 250 desktops attached to two Extreme Black Diamond 1Gbps switches that are By Frank A on November 20, 2007, 4:55 pmHaving implemented NAC solutions for
http://www.networkworld.com/news/2007/111407-nac-early-adopters.htmlHOME |
Then, what ExtremeXOS will do on the port is create a dynamic ACL (Access Control
List). That means the system is saying, for example, that if you see traffic coming from this particular end point and it does not have the proper address from the DHCP server, then drop that traffic.
Even without Arkin's direct comments on the Extreme Networks solution (he was not available for comment on this product release), his
Black Hat presentation did serve as somewhat of an impetus for the creation
of the solution in the first place, Extreme Networks' Bardzil said. "The news [by then] made its way out to end customers and we have run into customers that have asked or their
requirements state that they need port level security."
Bardzil admitted, however, that not all the issues with DHCP have been plugged
but he argued that ExtremeXOS 11.6 does plug the major issues. Extreme
Networks also has an OEM relationship with NAC vendor Still Secure
and rebrands its Safe Access NAC product as Extreme Networks
CentrantAG.
Within the CentrantAG product, additional checks are provided for
DHCP security, including making sure that an endpoint isn't using internet
connection sharing or using any sort of bridge that could allow it to bypass
DHCP enforcement.
Beyond improvements to DHCP based NAC deployments, ExtremeXOS 11.6 also
improves on its Microsoft NAP (Network Access Protection) capabilities. NAP
is Microsoft's brand of NAC and though it is not yet publicly available it
already
has 100 industry partners . One of those partners is Extreme Networks.
 probabilities of a human birth
 Human Psychological Wellbeing
|
An Extreme Solution for NAC