Free Newsletter
Register for our Free Newsletters
Access Control
Deutsche Zone (German Zone)
Education, Training and Professional Services
Government Programmes
Guarding, Equipment and Enforcement
Industrial Computing Security
IT Security
Physical Security
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor
ProSecurityZone Sponsor

Sophos emphasises need for network access control

Sophos : 11 September, 2007  (Technical Article)
Continued vulnerability in Microsoft strengthens requirement for solid network access control to stay ahead of Microsoft patch schedule according to Sophos.
IT security and control firm Sophos is advising companies to consider the benefits of Network Access Control (NAC) to ensure that computers are adhering to corporate IT security policy, in light of a number of new security patches being issued today by Microsoft.

As part of its monthly 'Patch Tuesday' schedule, Microsoft is issuing four new bulletins (one of them described as 'critical') outlining a number of different security vulnerabilities in its products, including its Windows 2000 operating system and Windows Live Messenger.

All organisations should roll-out these patches as a matter of urgency, as some of them could enable hackers to access data on a vulnerable PC or run malicious code. However, many firms could still be at risk if they allow guests, business partners or customers to bring unpatched machines into the company and connect to the network.

Furthermore, Sophos experts note that a large number of companies face an ongoing struggle to ensure that all internal devices are successfully patched against emerging vulnerabilities. This is because some machines may be incorrectly configured to receive updates, while others may not be connected to the network at the time of the roll-out.

'Installing the latest Microsoft security patches may sound straightforward, but for a lot of companies it's easier said than done, particularly if you have a regular stream of visitors connecting to your network,' said Graham Cluley, senior technology consultant at Sophos. 'It doesn't matter whether it's an employee's desktop PC or a customer's laptop - an unpatched machine represents a possible avenue for a cyberattack.'

'Network Access Control can help prevent this from becoming a reality by giving businesses the ability to control who and what is connecting to a network,' continued Cluley. 'If a machine hasn't had the correct patches installed, you can prevent it from causing any harm to the rest of your organisation by blocking its access to the network, or quarantining the machine until it conforms with company IT policy.'

Home users of Microsoft Windows can visit the Microsoft update site to have their systems scanned for Microsoft security vulnerabilities.

Sophos suggests that every IT manager responsible for security should consider subscribing to vulnerability mailing lists such as that operated by Microsoft.

Sophos recommends companies protect themselves with a consolidated solution which can control network access and defend against the threats of spam, hackers, spyware and viruses.
Bookmark and Share
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
   © 2012
Netgains Logo