The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Bypassing Network Access Control (NAC) Systems
------------------------------------------------------------------------
SUMMARY
Ofir Arkin announced a new white paper on weaknesses and ways to bypass
existing Network Access Control (NAC) solutions.
DETAILS
Abstract:
The threat of viruses, worms, information theft and lack of control of the
IT infrastructure leads companies to implement security solutions in order
to control the access to their internal IT networks. A new breed of
software and hardware solutions from a variety of vendors has recently
emerged. All are tasked with one goal - controlling the access to a
network using different methods and solutions. This paper will examine
different strategies used to provide network access controls. Flaws
associated with different NAC solutions will be presented. These flaws
allow the complete bypass of each and every network access control
mechanism currently offered on the market.
The paper can be downloaded from:
<http://www.insightix.com/resources/whitepapers/bypassing.aspx>
http://www.insightix.com/resources/whitepapers/bypassing.aspx
ADDITIONAL INFORMATION
The information has been provided by <mailto:ofir@sys-security.com> Ofir
Arkin.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
