Reinforcing Network Security with Advanced Access Control

As digital threats become more sophisticated, the threat of unauthorized access to your network and other malicious activities is constant, especially when employees are inactive, such as during vacations or after-hours. Hackers often exploit these periods to launch attacks. Reduce your attack surface with OpenOTP NAC (Network Access Control) and mitigate these risks by providing robust protection and dynamic control over network access, ensuring that only authorized users and devices can connect, based on location and device verification. This approach helps maintain security and reduces the attack surface during inactive periods.

The Concept of OpenOTP NAC

At its core, OpenOTP NAC operates on the principle of granting or revoking network access permissions to devices based on their MAC addresses. The primary goal is to prevent unauthorized devices from accessing the network, thereby safeguarding sensitive information and maintaining network integrity. By linking access authorization to the physical presence of users (verified through badging, where users indicate their presence via the OpenOTP token app), OpenOTP NAC minimizes exposure time to potential threats, ensuring that only authenticated and present users can connect to the network.

How It Works

OpenOTP NAC provides two operational modes, catering to different security needs and administrative preferences:

1. Auto-Creation Mode: This mode is ideal for environments with a large number of users or during the initial setup phase. When a new device connects to the network for the first time, OpenOTP NAC automatically registers the MAC address and links it to the user who is currently authenticated and present. This streamlined approach reduces administrative overhead and ensures seamless integration of new devices.
2. Strict Mode: For heightened security, strict mode requires administrative approval for each new device attempting to connect to the network. When a new device is detected, the system sends an alert to the administrator, who must then manually approve the device. This mode is perfect for environments where tight control over network access is critical.
3. Group-Based Access: administrators can define groups, restricting device usage to specific user groups. Only members of the designated group can use the device, making it easier to manage access and enhance security.

Enhancing Security with Badging

OpenOTP NAC also integrates a unique badging system through the OpenOTP token app, which verifies user presence. This feature provides several key benefits:

• Auto-Badging: Administrators can enable auto-badging for specific accounts, automatically linking user presence to network access.
• Badge-Out Functionality: When a user badges out (indicating they are no longer present), all their associated devices are immediately disconnected from the network, whether they are connected via Ethernet or Wi-Fi. This significantly reduces the risk of unauthorized access during off-hours.

Comprehensive Visibility

OpenOTP NAC also provides administrators with comprehensive visibility into network access activities. They can monitor recent network access, view device connection types (wireless or Ethernet), and ensure all connected devices comply with security policies.

Key Features of OpenOTP NAC

1. Enhanced Network Security

• Dynamic Security Measures: Integrates location-based controls to ensure only authorized users can access network resources.
• MAC Address Verification: Verifies device MAC addresses for added security.
• Device Authorization: Ensures only authorized devices can connect.
• User/Group Linking: Link users or groups to specific MAC addresses for tailored access control.
• Temporary Deactivation: Temporarily deactivate a user or a MAC address when needed.

2. Seamless Integration

• 802.1X Authentication Protocols: Supports seamless integration with existing network infrastructure.
• Enterprise WiFi & Wired Networks: Extends access control to both wireless and wired networks.
• Managed Switches & Access Points: Compatible with IEEE 802.1X standard.

3. Advanced Authentication Methods

• OTP, Push Notifications: Provides multiple robust authentication options, including Push Notifications with OpenOTP Token app.
• PKI: Client Certificates (EAP-TLS): Grant network access using client certificates.
• Two-Factor Authentication (2FA): Enhances security with password concatenation.

4. Automatic Mobile Badging Integration (using OpenOTP Token App)

• Location-Based Badging: Automatically badges users in based on location and device.
• Network Access Control: Grants network access and unlocks AD accounts upon badging in.
• LDAP-Level Security: Locks AD accounts and revokes network access when users are not badged in.

5. Comprehensive Policy Management

• User & Group Policies: Define access policies per user or group.
• Dynamic Access Control Lists: Configure VLAN access based on policies.

6. Reduced Attack Surface

• Vacation & Inactivity Security: Minimizes attack risks when users are inactive or on vacation.
• IoT Device Protection: Prevents unauthorized IoT device connections.

By integrating advanced features like automatic mobile badging, location-based controls, and dynamic access management, OpenOTP NAC offers a comprehensive and user-friendly network security solution. This system ensures robust protection against unauthorized access, simplifies network resource management, and allows for temporary deactivation of users or devices. It supports multiple authentication methods including PKI, OTP, Push Notifications, and client certificates (EAP-TLS). Additionally, you can link users or groups to specific MAC addresses and set policies to manage access. Contact us today to reduce your attack surface with OpenOTP NAC.