ID-Enforce™

Controlling Internal Access

Controlling who has access to the network and specific network resources is a crucial element of network security. With the ubiquitous access that the Internet has enabled and the expanding definition of who is considered an “internal” user, access control has become increasingly difficult to maintain. In addition, being able to verify that someone is who they say they are and then grant them access based on their user privileges is also a key part of anyone’s network security.

Enforcing Network Access Using Identity

Organizations don’t want to make configuration changes to their existing architecture when they deploy a security solution. Applied Identity’s security solutions have a robust set of flexible network deployment options that allow enterprises to easily integrate into new or existing networks without the need to ‘rip and replace’ existing infrastructure.

ID-Enforce is an Identity Access Gateway that uses firewall-like technology to tie access policies with user network identity and network resources for authorization and audit of network activities. ID-Enforce sit’s inline, close to the resources it protects, which ensures that all users must pass through it in order to access data and applications. Identity Access Gateways can be deployed as a Layer 2 or Layer 3 security device, therefore minimizing the time and effort of reconfiguring the network.

How it Works

ID-Enforce can be deployed in either an audit or audit and enforce mode. The audit capability is non-intrusive used to baseline user activity and create a log of resource usage within ID-Audit. The information collected forms the basis used to create network access policies for enforcement. Users are either granted or denied network access based upon the policies assigned to their group role, the application or service they are accessing or as individual users.