CYBERGATEKEEPER WITH DNAC

Product Details

This Product Review is in the following Category:
Security Management, Assessment, Incident Response

This Product Review is in the following Sub-category:
Policy Management/Enforcement

	Version:
	Vendor:	InfoExpress
	Price:	£2,650 for server software; £26 per seat for 500+
	Date:	1-Mar-07
	Author:	Justin Peltier

clear float

CyberGatekeeper with DNAC (dynamic network access control) was one of the more challenging products to work with in our review process. The application is feature rich with the ability to develop polices for primarily Windows-based systems that would need to meet policy criteria in order to gain access to the network. The CyberGatekeeper application consists of three components: a policy manager, a policy server and a reporting server.

The reporting interface and most of the management of the CyberGatekeeper product is through a web interface. Typically, this product is installed by InfoExpress engineers onsite to ensure the client has a greater depth of understanding of this application. From a pure security standpoint, this application has some advantages in the ability of the client to restrict the level of access to the network an endpoint (workstation) will have.

Once the application is installed, it is possible to alert the user, through the use of pop-up messages, as to why the endpoint is not in compliance with the policy. Network access is given based on a series of network rules that appear very similar to iptables rules or early Cisco router

configuration rules. If an endpoint is in a non-compliant situation, limited access is granted to the network. The configuration interface is complex, but after some time it begins to become a bit easier to navigate.

CyberGatekeeper installed very easily on a standard Windows 2003 server build. The CyberGatekeeper application is installed from a single executable. During the install process, a SQL database server will be installed if the current server is not running a SQL database.

Documentation for this product is a single PDF document which is indexed and searchable. The documentation is clear and easy to understand.

Support for the CyberGatekeeper product is available through several phone support options that include both 8x5 and 24/7 support. Email and online support options are available which include access to a password protected knowledge base.

The pricing for the product is at the upper end of products that we tested.

clear float