NAC – Network Access Control

Core Concepts, Technical Controls

April 12, 2023 / Comments Off

NAC - Network Access Control

Definition

What is a Network Access Control (NAC)?

Network Access Control (NAC) is a security solution designed to ensure that only authorized devices and users can access an organization’s network resources. This essential security measure protects data and systems from unauthorized access and threats such as malware and cyberattacks.

At its core is the Access Control Server, which is responsible for enforcing access policies, authenticating users and devices, and determining whether to grant or deny network access. Network devices include computers, laptops, smartphones, and IoT devices that connect to the network.

Access policies are the rules and guidelines that dictate which users and devices are permitted to access the network and the specific resources they can use.

Authentication is the process of verifying the identities of users and devices prior to granting them network access. Additionally, enforcement involves applying access policies to ensure that only authorized users and devices gain entry to the network.

There are various types of NAC solutions available. Network-Based NAC deploys the access control server directly on the network to manage access to network resources. Host-Based NAC installs access control software on individual devices to regulate their access. Lastly, Cloud-Based NAC utilizes a cloud-hosted access control server to oversee access to network resources.

You may also find interesting

You may also find interesting

Glossary

Firewall

A firewall is a network security system that monitors and...

NAC – Network Access Control

Network Access Control (NAC) is a security solution that helps...

CIA Triad

The CIA Triad is a fundamental concept in cybersecurity that...

IDPS – Intrusion Detection and Prevention System

Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are...

VPN – Virtual Private Network

A Virtual Private Network (VPN) is a technology that allows...

Ransomware

Ransomware is a type of cyber attack in which the...

RTO – Recovery Time Objective

The Recovery Time Objective (RTO) defines the maximum amount of...

RPO – Recovery Point Objective

An Incident Response Plan (IRP) is a strategy that outlines...

IRP – Incident Response Plan

An Incident Response Plan (IRP) is a strategy that outlines...

DRP – Disaster Recovery Plan

A Disaster Recovery Plan (DRP) is a key document in...

BIA – Business Impact Analysis

A Business Impact Analysis (BIA) is a vital process in...

BCP – Business Continuity Plan

A Business Continuity Plan (BCP) is a key document in...

CBA – Critical Business Asset

A Critical Business Asset (CBA) is the most essential resource...

CBP – Critical Business Process

A Critical Business Process (CBP) is the most crucial process...

ISO/IEC – 27001

ISO 27001 is a globally recognized standard for information security...

National Institute of Standards and Technology (NIST) Special Publication 800-53

The National Institute of Standards and Technology (NIST) Special Publication...

GDPR – General Data Protection Regulation

The General Data Protection Regulation (GDPR) is a comprehensive data...

FISMA – Federal Information Security Modernization Act

The Federal Information Security Management Act (FISMA) is a United...

HIPAA – Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act (HIPAA) is a...

AICPA – American Institute of Certified Public Accountants – SOC2

The American Institute of Certified Public Accountants (AICPA) SOC 2...

CISO – Chief Information Security Officer

A Chief Information Security Officer (CISO) is a senior executive...

Digital Forensics

Digital Forensics is a field that specializes in the investigation...

Shadow IT

Shadow IT refers to the use of digital technologies and...

Vulnerability

A Vulnerability refers to a weakness or flaw in a...

APT – Advanced Persistent Threat

Advanced Persistent Threat (APT) is a term describing a sophisticated...

Threat Hunting

Threat Hunting is a proactive process aimed at locating and...

Cyber Attack Vectors

Attack Vectors are the pathways through which attackers infiltrate computer...

CISSP – Certified Information Systems Security Professional

Certified Information Systems Security Professional (CISSP) is an international certification...

EDR / XDR – Extended Endpoint Detection and Response

Extended Detection and Response (XDR), similar in nature to EDR,...

SIEM – Security Information and Event Management

Security Information and Event Management (SIEM) is a system designed...

Sandbox

A Sandbox is an isolated environment where code or software...

SOAR – Security Orchestration Automation and Response

Security Orchestration, Automation, and Response (SOAR) is a solution designed...

DLP – Data Loss Prevention

Data Loss Prevention (DLP) systems focus on identifying, monitoring, and...

SOC – Security Operations Center

A Security Operations Center (SOC) is a centralized unit within...

CVE – Common Vulnerabilities and Exposures

CVE is a program used for reporting security vulnerabilities and...

Patch Management

Patch Management involves identifying, assessing, and installing updates and patches...

IOC – Indicators of Compromise

Indicators of Compromise (IOCs) are data or parameters that help...

Exploit

An Exploit is a code or attack technique used to...

CVSS – Common Vulnerability Scoring System

The Common Vulnerability Scoring System (CVSS) is an international method...

GRC – Governance Risk Compliance

Governance, Risk, and Compliance (GRC) is a comprehensive concept that...

FedRAMP – Federal Risk and Authorization Management Program

FedRAMP (Federal Risk and Authorization Management Program) is a U.S....

SABSA – Sherwood Applied Business Security Architecture

SABSA (Sherwood Applied Business Security Architecture) is a business-driven security...

TOGAF – The Open Group Architecture Framework

TOGAF is a comprehensive framework that guides organizations in designing,...

MTTR – Mean Time to Recover

Mean Time to Recover (MTTR) is a key metric in...

Brute Force Attack

A Brute Force Attack is a trial-and-error method used by...

Insider Threat

An Insider Threat refers to a security risk posed by...

Packet Sniffing

Packet Sniffing is a technique used to monitor and capture...

Phishing Attack

Phishing is a social engineering attack in which cybercriminals impersonate...

Penetration Test

A Penetration Test or simply pen test, is a simulated...

UAC – User Access Control

User Access Control (UAC) is a security feature in Windows...

WSC – Windows Security Center

Windows Security Center (WSC) is a built-in feature in Windows...

Hashing

Hashing is a cryptographic process that transforms an input ("message")...

Email Security Gateway

An Email Security Gateway is a system or appliance designed...

ISC2 – The International Information System Security Certification Consortium

The International Information System Security Certification Consortium (ISC2) is a...

Antivirus

The traditional Antivirus software is designed to detect, block, and...

Cryptography

Cryptography is the practice of securing information by converting it...

AMSI – Anti Malware Scan Interface

The Anti-Malware Scan Interface (AMSI) is a security feature in...

Bastion Host

A Bastion Host (AKA Jump Box) is a specialized server...

ETW – Event Tracing for Windows

Event Tracing for Windows (ETW) is a high-performance logging mechanism...

MFA – Multi Factor Authentication

Multi Factor Authentication (MFA) is a security mechanism that requires...

Vulnerability Assessment

A Vulnerability Assessment is a systematic process used to identify,...

IOA – Indicators of Attack

A Brute Force Attack is a trial-and-error method used by...

CSA – Cloud Security Alliance

The Cloud Security Alliance (CSA) is a nonprofit organization dedicated...

CISM – Certified Information Security Manager

Certified Information Security Manager (CISM) is a globally recognized certification...

PII – Personally Identifiable Information

Personally Identifiable Information (PII) refers to any data that can...

ISACA – Information Systems Audit and Control Association

The Information Systems Audit and Control Association (ISACA) is a...

IETF – Internet Engineering Task Force

The Internet Engineering Task Force (IETF) is an open standards...

ICANN – Internet Corporation for Assigned Names and Numbers

The Internet Corporation for Assigned Names and Numbers (ICANN) is...

IEEE – Institute of Electrical and Electronics Engineers

The Institute of Electrical and Electronics Engineers (IEEE) is the...

IANA – Internet Assigned Numbers Authority

The Internet Assigned Numbers Authority (IANA) is a key organization...

CISA – Cybersecurity and Infrastructure Security Agency

The Cyber security and Infrastructure Security Agency (CISA) is a...

PHI – Protected Health Information

Protected Health Information (PHI) refers to any information in a...

CRISC – Certified in Risk and Information Systems Control

Certified in Risk and Information Systems Control (CRISC) is a...

Administrative Controls

Administrative controls are policies, procedures, and guidelines that govern how...

CASB – Cloud Access Security Broker

A Cloud Security Access Broker (CASB) acts as an intermediary...

Physical Controls

Security measures designed to protect an organization's physical infrastructure and...

Digital Signatures

Digital signatures are cryptographic mechanisms used to authenticate the validity...

Honeypot

A Honeypot is a decoy system or network resource designed...

IAM – Identity and Access Management

Identity and Access Management (IAM) is a framework of policies,...

SASE – Secure Access Service Edge

Secure Access Service Edge (SASE) is a cloud-based architecture that...

WAF – Web Application Firewall

A Web Application Firewall (WAF) is a security solution designed...

Zero Trust

Zero Trust is a security framework that operates on the...

Technical Controls

Technical controls (also known as logical controls) are security measures...

TOR – The Onion Router

TOR is a privacy-focused network that enables anonymous communication over...

Tails OS – The Amnesic Incognito Live System

Tails (The Amnesic Incognito Live System) is a privacy-focused Linux...

Privilege Creep

Privilege creep occurs when an individual within an organization gradually...

The Principle of Least Privilege

The Principle of Least Privilege (PoLP) is a security concept...

IAAA – Identification and Authentication Authorization and Accountability

Identification, Authentication, Authorization, and Accountability (IAAA) are four key principles...

DPO – Data Privacy Officer

A Data Privacy Officer (DPO) is a key role within...

Data Owner

A Data Owner is a person or entity accountable for...

Dark Net

The Dark Net is a hidden part of the internet...

Data Custodian

A Data Custodian is responsible for the technical management, storage,...

Biba Model

The Biba Model is a formal security model focused on...

Cyber Security Architect

A Cyber Security Architect is a professional responsible for designing...

Bell LaPadula Model

The Bell-LaPadula Model is a formal security model designed to...

MITRE

MITRE is a not-for-profit organization that operates federally funded research...

MITRE ATT&CK

MITRE is a not-for-profit organization that operates federally funded research...

MITRE D3FEND

MITRE D3FEND is a cyber security framework designed to help...

Website Navigation

Open Source Solutions

Legal

Connect With Us

Subscribe to our newsletter!

Subscribe to our newsletter!

Website Navigation

Open Source Solutions

Legal

Connect With Us

© Cygeta All Rights Reserved 2023-2024