CyberGatekeeper is a network access control platform that can force endpoint computers to match policy-based configuration parameters before they are allowed to access the network.

The administrator utilizes a centralized Policy Manager component (Windows) in which they can define the access policies that will be enforced for end point compliance. Such policies can include checks for specific processes or files (including parameters such as date/time stamps, size, version, and checksum), registry settings, O/S versions (including check for service packs and updates), computer names, .ini file contents, and network settings.

On the end user side, audit data is provided via either an installed agent on the end-point (Windows (2000/XP/2003), Linux, and Mac OS X) or a Web-based agent that can be launched from within Firefox or Internet Explorer. This agent, when it senses that an audit is required (the agent is configured with specific conditions that tell it when to audit), communicates with the CyberGatekeeper server to determine the necessary data that must be examined on the end user's machine. It then collects that data and sends it back to the server for verification against currently defined policies. The server can then block or allow access to the network from the endpoint depending on their current configuration; and remediation actions can additionally be incorporated with each policy such that if user fails the audit because of this component, the remediation will automatically be performed.

For end users that cannot run an installed or Web agent on their machines, the vendor notes that whitelist-based access controls can be utilized, allowing them to access the network if necessary.

Multiple flavors of the CyberGatekeepr platform are available, each providing the ability to block network access in specific ways:

- CyberGatekeeper Server--a hardware appliance--is the core product offering, allowing for the blocking of network access via 802.1x, inline, and Dynamic NAC (see below) deployment models.

- CyberGatekeeper Remote--also a hardware appliance--is essentially an inline-only version of the CyberGatekeeper server; targeted primarily to the protection of remote access VPNs.

- DNAC software, which consists of agents that run on selected endpoints, "dissolvable" Web agents as described above, and a central server (Windows 2000/2003 Server). In a DNAC implementation, no network changes are required for implementation. Rather, the agent that is installed directly on selected end points (Windows 2000/XP/2003 now, with Mac OS X and Linux DNAC support due later this year) can additionally act as an "Enforcer," using Layer-2 redirection tactics to prevent other rogue or unauthorized end points from accessing the subnet or other networks. In a DNAC implementation, the endpoint communicates with the central server (through its installed agent or a dissolvable client), which in turn sends authorization information to all of the enforcers. Whitelist information is also communicated from the central server to the enforcers so allowed devices that cannot run an agent can be let through.

New to the CyberGatekeeper family is the Dynamic NAC Guest Enforcer; a scaled back version of the full DNAC implementation targeted specifically to network guest access protection. The vendor states that Dynamic NAC Guest Enforcer can be upgraded to the full DNAC Suite if and when needed.

CyberGatekeeper is available now. Pricing is $7,500 for the CyberGatekeeper Server appliance; $4,995 for the DNAC Software server; and $55/seat for CyberGatekeeper agents. The new Dynamic NAC Guest Enforcer product will be base priced at $3,495 for a 50-seat bundle and is expected to be available on July 1st.

Contact InfoExpress for further information.