Properly quarantining infected or out-of-policy devices is a critical component of an effective Endpoint Control solution. Mirage surgically quarantines at-risk devices using unique ARP management capabilities. Unlike other solutions that direct vulnerable endpoints to quarantine VLANs where they can infect each other (a.k.a. “VLANs of death”), the Mirage solution completely isolates offending endpoints, preventing cross-infection.
When a threat or policy violation is detected, Mirage modifies the ARP table of the offending device to transform the Mirage appliance into a gateway for all traffic originating from the endpoint. This technique enables Mirage to effectively quarantine risky endpoints in an infrastructure-independent fashion that eliminates the need to integrate with a switch or router – making deployment and ongoing management significantly easier. Users are alerted to their quarantine status through a Web browser window, which can be customized with appropriate language. This ensures end users understand what’s occurring and why their device has been quarantined.
Mirage delivers targeted and highly flexible quarantining options, enabling you to specify different access levels for specific endpoints while quarantined. For example, the CEO may be permitted Internet access with an out-of-policy PC, while in the background Mirage scans the device and sends an alert to the IT department to provide in-person diagnosis and remediation. On the other hand, a contractor who requests network access with an unmanaged device may be directed to a quarantine server for policy diagnosis and self-remediation options.
Mirage’s quarantining capabilities can be customized based on user type, profile, and other characteristics. These options include:
- No network access until remediation is complete
- Limited network access, such as Internet access only, until remediation is complete
- Redirection to a Web server for self-remediation
Mirage enables you to establish multiple remediation Web servers for different types of devices and network offenses. These servers offer great flexibility as they can be customized with patches and remediation options. This allows users to self-remediate in order to minimize help desk calls, to increase user productivity by decreasing remediation time, and to reduce overall support costs.
Next »
Next » |
