What should happen to users and devices that fail NAC policies?

What should happen to users and devices that fail NAC policies?

What should be done with users and any malware-infected devices that violate NAC policies

    Requires Free Membership to View

    Login

    SearchSecurity.co.UK members gain immediate and unlimited access to breaking UK industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.co.UK today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.co.uk you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.co.uk is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

This has to be partly an HR question! From the user perspective, if your network access control (NAC) policies are mentioned in your acceptable use policy, and your users have been made aware of this policy and the consequences of non-compliance, then the user's manager and your HR people would have to decide on appropriate action. Organizations may choose to immediately lock out or quarantine a non-compliant device, or they may offer a grace period for remediation in order to keep resources up and running, for example.

From the device perspective, it is always best to erase the device and rebuild it from scratch, unless you are certain that your disinfection tools have completely removed the malware.

This was first published in August 2009