Network Access Control (NAC)

With the EdgeXOS platform network administrators are able to identify user/devices on their network, provide descriptions for each, and group them together. The EdgeXOS platform also provides full network access control via User Authentication for web access, inbound/outbound firewall policies and remote user connectivity via our Site2Site VPN clients.

Components

The following is a list of components included as part of the NAC Firewall feature set within the EdgeXOS platform.

User/Device Management
Managed all of your users and network devices from a single screen. Assign users to specific groups and manage usernames which will be used in all XFow network reporting. With the ability to upload CSV based user files and future integration with MS Active Directory managing network components has never been so easy.

User Authentication / DHCP Control
Control web-based access to the Internet and other network resources using our authentication module. Users are presented with a login screen which they must provide a given username/password in order to access web-based network resources. A great tool for ensuring secure web access.

Netsweeper Web Filtering
With our partnership with Netsweeper the EdgeXOS platform has one of the best web filtering solutions available on the market today. Control access to authorized and unauthorized web sites. Over 70+ categories to choose from and the ability to create custom categories.

Session Limiting L7 Firewall
The NAC Firewall includes a fully functional deep inspection firewall which includes advanced inbound/outbound access policies and the ability to control application and end-user access. The firewall also includes a searchable logging feature for easy troubleshooting.

Site2Site Client Connectivity
Our new Site2Site client provides simple remote access connectivity for teleworkers or home office end-users. This secure VPN client includes 3DES encryption and is easy to install on any Windows-based OS. The client also includes full redundancy capabiities so that if a single WAN port were to fail at the HQ location the client will automatically attempt a connection to the backup link.