Question

Discuss the article below. Your paper should be about 1000 words (give or take 10%) and must be in standard APA or MLA format. Be sure to include your interpretation of the document and how it can be used in a typical organization. You should cite the paper and any other resources you use.

1: IT Network Access Policy

Answer 1

Network access control:

All the organisations are having an exponential amount of mobile devices accessing their own network.

So, it is obvious that they bring huge number of security risks. So, it is important to have some tools to control the access of those insecure mobile devices into the network and access data to prevent all kinds of malpractice that may happen through those.

A NAC system is here to deny network access ability to noncompliant devices and offer restricted access to computing resources. It helps for network visibility, and access management through policy enforcement on different nodes of a corporate network.

• It enforces policies for all operating scenario. For this it doesn't even need separate products and additional modules.
• It detects the user and device before some damage happens.
• It manages guests on the network with some important stages, like guest registration, authentication, validation, guest management portal.
• Integrate other security and network solutions.
• It monitors, controls and check activity of the devices when they are on the network.
• It is applicable to all end points like computers, servers, routers, firewalls through which they can access the network.

EAP:

• The full form of EAP is extensible authentication programme.
• It is a protocol for wireless networks, which expands on the authentication method used by PPP protocol and local erea network (LAN).
• It is used to authenticate dial-up and LAN coonections.
• EAP supports different authentication mechanism like smart card, token card , One time password, public key encryption etc.

Working principle in brief::

• User requests connection to a wireless network through a specific access point or asks through a transceiver.
• Access point requests for identification data and sends for authentication to a particular server appointed for it.
• Server asks the access point to validate the identification data.
• The access point asks the user for validation and sends it back to the server.
• The connection is established.