<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: NAC Attacked by NAC Vendor</title>
	<atom:link href="http://www.seanconvery.com/weblog/2006/08/03/nac-attacked-by-nac-vendor/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.seanconvery.com/weblog/2006/08/03/nac-attacked-by-nac-vendor/</link>
	<description>Ruminations on Identity Management for Networks</description>
	<pubDate>Sun, 07 Sep 2008 21:47:24 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>By: Sean Convery &#187; Blog Archive &#187; Insightix&#8217;s NAC Approach</title>
		<link>http://www.seanconvery.com/weblog/2006/08/03/nac-attacked-by-nac-vendor/#comment-911</link>
		<dc:creator>Sean Convery &#187; Blog Archive &#187; Insightix&#8217;s NAC Approach</dc:creator>
		<pubDate>Wed, 25 Oct 2006 21:54:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.seanconvery.com/weblog/2006/08/03/nac-attacked-by-nac-vendor/#comment-911</guid>
		<description>[...] Tim Greene from Network World has an article up highlighting the Insightix NAC solution. Insightix is the company co-founded by Ofir Arkin, who got some notoriety by showing how NAC could be &#8220;bypassed.&#8221; I wrote about his presentation a while back so I won&#8217;t reiterate any of that. But I found this snippet from Greene&#8217;s article interesting: Insightix NAC software can block unauthorized devices from network access via address resolution protocol (ARP) spoofing, which tells the device it is ineligible to send traffic to the network. Alternatively, it can block access to switch ports using SNMP commands to switches that deny access. [...]</description>
		<content:encoded><![CDATA[<p>[...] Tim Greene from Network World has an article up highlighting the Insightix NAC solution. Insightix is the company co-founded by Ofir Arkin, who got some notoriety by showing how NAC could be &#8220;bypassed.&#8221; I wrote about his presentation a while back so I won&#8217;t reiterate any of that. But I found this snippet from Greene&#8217;s article interesting: Insightix NAC software can block unauthorized devices from network access via address resolution protocol (ARP) spoofing, which tells the device it is ineligible to send traffic to the network. Alternatively, it can block access to switch ports using SNMP commands to switches that deny access. [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
