2.4. Wireless Networks and NAC

Mobility is attractive. It promises hassle-free, anytime, anywhere access that enables employees to connect to the network, around the clock and around the world. Companies also deploy wireless local area networks (WLANs) because these networks are simple to install and expand the work environment, providing a localized type of mobility, and lead to increased productivity.

A wireless LAN doesn't need much wiring, which can make deploying it more cost-effective than traditional wired networks. A WLAN is also more flexible for implementing physical office changes, which can also save cost and time. However, although mobility and WLAN access are both desirable and increase productivity, maintaining network security for mobile or WLAN users and devices is a concern. The more wireless LANs your company deploys, the greater the risk that someone can hack, breach, or attack your network and its resources. The open nature of WLAN access brings additional security concerns. Without the proper credentials, security, and controls in place, a hacker can snoop or steal sensitive user information and corporate data while a user establishes a wireless connection and even after a user is connected to the WLAN.

NAC can address WLAN access — without impeding the openness of the WLAN network or its accessibility — by applying strong authentication controls to check the authenticity of the user, and his or her device, before granting that user and device access to a ...

Get Network Access Control For Dummies® now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.