topics that matter; ideas worth sharing

share a tip, submit a link, add something new

IBM releases Tivoli updates for Cisco NAC

December 21, 2004, 09:26 AM —  IDG News Service — 

IBM Corp. plans to release updates to two products that tighten integration between its Tivoli product and Cisco Systems Inc.'s Network Admission Control (NAC) technology, according to a statement from the company.

Tivoli Security Compliance Manager version 5.1 and Tivoli Provisioning Manager version 2.1 have new "autonomic" features that will reduce the damage and disruption to businesses caused by viruses, worms and vulnerable software. Both products will now integrate with Cisco's Secure Access Control Server (ACS), allowing organizations to deny network access to insecure or virus-infected systems, IBM said.

Compliance Manager is software that can inspect devices attempting to connect to a network, flagging systems that do not adhere to corporate security policy. The product can assess issues such as whether antivirus software is up to date, or the computer operating system is running the latest software patches. That information can now be used by Cisco's ACS to quarantine machines deemed insecure, said Ric Telford, director of architecture and development in IBM's Autonomic Computing group.

Provisioning Manager allows administrators to fix noncompliant devices to conform to security policies. Administrators can use workflow features in Provisioning Manager to automate tasks such as installing operating system or antivirus software updates, IBM said.

The release of new versions of Compliance Manager and Provisioning Manager delivers on a promise made by both companies in February, when they announced a "global security initiative" to improve the security of network infrastructure. IBM promised to join the NAC program and begin working on a software agent that will tie Tivoli to ACS. In October, the companies announced the updates to Compliance Manager and Provisioning Manager, which are now available to the public.

"These products will ensure compliance of devices as they come onto the network and allow remediation if devices are not in compliance," Telford said. "This release closes the loop of security problem detection and remediation automatically and limits the need for human intervention," he said.

Cisco has steadily built support for NAC with security software vendors of all stripes in recent months. Companies such as McAfee Inc., Trend Micro Inc. and Computer Associates International Inc. already offer NAC-compliant products.

On Monday, security vendors StillSecure and WholeSecurity Inc. said they would join the NAC Program. Network security vendor StillSecure said it will integrate its Safe Access endpoint security compliance solution with NAC components such as the Cisco Trust Agent and Cisco Secure Access Control Server. WholeSecurity, which makes behavior-based threat detection technology for servers and PCs, said that its Enterprise Edition Always-On product will be integrated into NAC.

IDG News Service

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources