Comparison of Static Policy Enforcement Techniques of NAC

Abstract: To secure any network today, prominent techniques used are firewalls, IDS, IPS and vulnerability assessment. To unify all these endpoint security methods, NAC is used. Network Access Control aims to do exactly what the name implies— control access to a network with policies, including pre-admission endpoint security policy checks and post-admission controls over where users and devices can go on a network and what they can do. In this paper, we have first described all the static enforcement policies of NAC. Then a detailed comparison is shown between all the static policies with their advantages and disadvantages. The main aim of this comparative study is to provide a security system, which can identify threats after the host is authorized and authenticated in the network. Such dynamic access prevention requires detection based on anomalies rather than static NAC policies. Techniques such as VLAN Steering can then be used for dynamic access prevention