CounterACT provides clientless Network Access Control (NAC) and threat protection to ensure network-connected devices are in compliance with network security and access policies, and are free of self-propagating malware. CounterACT integrates into a network environment and enables enterprises to tailor enforcement actions to match a specified level of policy violations. It provides enterprise-wide network policy enforcement across devices connected to a network and enforces the policies across all managed and unmanaged network devices, including desktops and laptops as well as non-OS devices such as VoIP phones, handhelds and network printers, etc.
\r\nCounterACT includes a Threat Protection component, specifically tuned against self-propagating malware. When propagation attempts are detected, those attempts can be automatically blocked, and the end-point can be placed in a quarantined VLAN.
\r\nNetwork administrators define security and access policies and associated enforcement actions that CounterACT will take when violations occur. Through a variety of detection mechanisms, including listening to network traffic, CounterACT is triggered as devices attempt to join the network, and it determines whether the connecting endpoints are managed (typically, employee) or unmanaged (guest, contractor or an unauthorized user). CounterACT immediately scans a device for policy compliance and malicious behavior, and can block the device if it presents a threat.
\r\nBased on the policy in place, CounterACT can assign guest endpoints or non-OS devices into suitably designated VLANs. Managed devices can be placed in their corresponding segment of the LAN and granted role-based access to pre-determined network resources. CounterACT initiates an interrogation of the endpoint to determine its compliance status with defined network security policies, while the device gains access to the network.
\r\nIn case a device is found to be non-compliant, CounterACT takes appropriate action associated with the specific policy violation. CounterACT continues to monitor devices for compliance throughout their connection to the network.
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. The TOE was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R3.
\r\n\r\n
The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 R3.
\r\n\r\n
CygnaCom Solutions has determined that the product meets the security criteria in the Security Target, which specifies an assurance level of Evaluation Assurance Level (EAL) 4 augmented with ALC_FLR.2.
\r\n\r\n
A team of validators, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed in September 2011.
","environmental_strengths":"The TOE provides the following security functionality:
\r\nThe TOE’s auditing capabilities include the generation of information about system processing, use of the administrative functions and attempted access to the protected network. The TOE provides authorized personnel access to the audit data and the ability to interpret and sort the data. The TOE protects the audit data from modification and unauthorized deletion.
\r\nThe TOE provides its own Network Access Control separate from that of the Operational Environment between subjects and objects covered by the TOE’s access control policies. The TOE supports three types of Network Access Control policies: NAC, Virtual Firewall, and Threat Protection. All three types of policies may be used simultaneously for network protection. The TOE provides administrative functions for authorized administrators to define these policies.
\r\nEach TOE user must be successfully identified and authenticated by the TSF or an external authentication service invoked by the TSF before access is allowed to the TOE. The TSF maintains security attributes for each individual TOE user for the duration of the user’s login session. The TOE also supports a password policy, authentication failure handling and masks the user’s authentication data upon input.
\r\nThe TOE provides role-based security management functions through the use of the administrative GUI. The ability to manage various security attributes, system parameters and all TSF data is controlled and limited to those users who have been assigned the appropriate administrative role and permissions.
\r\nThe TOE protects data being transferred between the distributed TOE components from disclosure and modification by the implementation of secure internal interfaces.
\r\nThe TOE further protects the targeted network through the ability to conduct vulnerability scans. The TOE has the ability to collect configuration and posture data from endpoints attempting network access, analyze the collected data and perform administrator configured remediation actions if a potential vulnerability is detected.
","features":[]}