NAICE

Monitor device connections to an enterprise network with logs. The system logs factors affecting the granting or denial of access, so that connection failures can be quickly detected and resolved.

A comprehensive access control system based on the RADIUS protocol provides reliable user authentication and authorization, network connection management and protection against unauthorised access to the network via the IEEE 802.1x protocol (EAP-PEAP).

The feature provides fast and secure addition of non-IEEE 802.1X devices (printers, cameras, IoT devices) to the network. Identification and access are performed by MAC addresses based on assigned policies. Profiling identifies the type of device and its specifications for the subsequent application of appropriate access rules.

NAICE is integrated with the user database, their attributes and groups from/to Microsoft Active Directory (MS AD) and LDAP. This provides user identification, authentication and authorization based on data from a centralized directory service without the need to change credential storage infrastructures. Depending on an attribute from the directory, such as VLAN or ACL membership, the corresponding access policy is assigned.