This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.
Gartner defines network access control (NAC) as technologies that enable organizations to implement policies for controlling access to corporate infrastructure by both user-oriented devices and Internet of Things (IoT) devices. Policies may be based on authentication, endpoint configuration (posture) or users' role/identity. NAC can also implement postconnect policies based on integration with other security products. For example, NAC could enforce a policy to contain the endpoint based on an alert from a SIEM.
An organization should evaluate the following capabilities:
• Device visibility/profiling
• Access control
• Security posture check
• Guest management
• Bidirectional integration with other security products.
Cisco Identity Services Engine is a software that provides network access control and policy management for organizations. It enables centralized authentication, authorization, and accounting for users and devices connecting to the network. The software offers features such as device profiling, guest access management, and endpoint compliance assessment. Cisco Identity Services Engine integrates with network infrastructure to enforce security policies and segment network access based on user roles, device types, and compliance status. The software addresses business challenges related to secure network access, reducing the risk of unauthorized access, and supporting regulatory compliance requirements across wired, wireless, and VPN connections.
Aruba ClearPass Policy Manager is a software designed to provide network access control and policy management for wired, wireless, and VPN environments. The software enables organizations to define and enforce security policies for users and devices, supporting authentication, authorization, and accounting. It offers features such as device profiling, guest access management, and integration with third-party security solutions. The software helps address business challenges related to secure access to corporate resources, visibility into network activity, and compliance with internal or regulatory requirements. Aruba ClearPass Policy Manager is intended to assist organizations in managing user and device access based on contextual information, reducing risks associated with unauthorized access.
The Forescout Vistaro platform discovers, assesses, controls, and governs connected assets across IT, IoT, IoMT, and OT. With skills-based agentic AI, the Vistaro platform delivers visibility, risk prioritization, with automated containment and control.
FortiNAC is a network access control software that provides visibility, control, and automated response for all devices connected to an organization’s network. The software helps organizations identify, manage, and monitor devices, including Internet of Things devices, across wired and wireless networks. It enforces security policies by controlling access based on user, device type, and role, and can automate responses to unauthorized or suspicious network activity. FortiNAC aims to reduce risks related to endpoint security by enabling segmentation and dynamic access restriction. The software is designed to address network security challenges by preventing threats that originate from unmanaged and unknown devices.
Ivanti Policy Secure (IPS) provides unified network access control (NAC) by continuously validating user identity and device security posture before granting access, reducing risks from unauthorized or non‑compliant endpoints. It provides full visibility by detecting, classifying, and monitoring managed, unmanaged, and IoT devices, and enforces least‑privilege access through centralized, granular policies. Automated remediation, guest access management, and integration with switching, Wi‑Fi, firewalls, SIEMs, and EMM/MDM systems strengthen enforcement and accelerate response to threats across diverse network environments
iMaster NCE-Campus is a network management software designed to streamline the deployment, operation, and maintenance of campus networks. The software provides unified management for wired and wireless network devices and supports automation, analytics, and visualization of network operations. It enables centralized configuration, policy enforcement, and monitoring to improve network reliability and efficiency. The software offers features such as topology management, fault diagnosis, performance analysis, and security control. By facilitating simplified network management and automation, iMaster NCE-Campus aims to address challenges associated with manual network operations and helps organizations achieve stable and optimized network performance within their campus environments.
MetaDefender NAC is a software that provides network access control capabilities designed to monitor, assess, and manage devices connecting to organizational networks. The software identifies and authorizes devices based on configurable security policies, ensuring only compliant endpoints can access critical network resources. It enables visibility into device posture by checking parameters such as security updates, antivirus status, and configuration settings before allowing network access. By integrating with other security tools, MetaDefender NAC helps organizations address the challenge of unauthorized access, supports regulatory compliance, and improves overall network security by enforcing adaptive access controls and real-time device assessments.
Extreme Management Center is a network management software designed to provide centralized control and visibility across wired and wireless network environments. The software enables configuration, monitoring, and troubleshooting of network devices from a single interface. It offers features such as automated device discovery, policy management, network analytics, and compliance reporting. The software supports the management of network access, application usage, and security settings to help organizations maintain operational efficiency and address connectivity and compliance challenges. It is suitable for use in enterprise and campus network environments where streamlined network administration and monitoring are required.
EasyNAC is an agentless Network Access Control solution that combines strong security with simple deployment. With ARP enforcement and a network-agnostic design, it delivers instant visibility and Zero Trust access across LAN, WLAN, and VPN—without VLAN changes or switch reconfiguration. EasyNAC blocks rogue devices, prevents malware spread, detects hacking with built-in deception, and protects against MAC spoofing. It integrates with AD, AV, XDR, and patch systems for compliance, with optional agents for remediation, and can automatically quarantine high-risk devices based on alerts from firewalls, SIEM, and endpoint security tools. Scalable from small sites to 200,000+ endpoints, EasyNAC extends protection to branches with lightweight sensors and centralized management.
Portnox is a cloud-native enterprise access control provider that helps organizations secure every identity - human and non-human - across networks, applications, and infrastructure. As identities, devices, and workloads multiply across modern environments, Portnox enables continuous access verification based on identity context, device posture, and risk signals. Its unified platform, Portnox Cloud, brings together passwordless authentication, access control, continuous policy enforcement, and automated response through a single policy engine.
Portnox gives security and IT teams real-time visibility into everything connecting and the ability to quickly restrict, quarantine, or revoke non-compliant access. Today, Portnox actively manages more than one million devices worldwide, secures 40 million authentication sessions, and blocks over one million unauthorized access attempts every day.
macmon NAC is a network access control software designed to monitor, manage, and secure network environments by regulating the access of devices to network resources. The software identifies, authenticates, and classifies devices on the network, enabling administrators to enforce security policies and segment network traffic. macmon NAC provides automated detection of unauthorized devices and supports compliance with regulatory requirements by maintaining visibility into connected endpoints. The software integrates with existing infrastructure, facilitates guest and employee access management, and offers reporting functionalities for network activity. It addresses business concerns related to unauthorized access, network security, and policy enforcement within organizations.
NACVIEW is a network access control software designed to manage, monitor, and secure devices connected to a corporate network. The software enables administrators to identify devices, enforce network access policies, and provide real-time visibility into network activity. NACVIEW supports authentication, authorization, and accounting mechanisms, allowing organizations to control user access based on roles and compliance requirements. It integrates with various network components to automate mapping and classification of endpoints, aiming to reduce risks associated with unauthorized devices. The software addresses business needs for regulatory compliance, data protection, and operational efficiency by enabling centralized control over connectivity and providing detailed reporting and auditing capabilities for network events.
CGX is a network access control software that provides organizations with the ability to manage and monitor devices connecting to their networks. The software includes features for real-time device detection, policy enforcement, and automated remediation of unauthorized access attempts. CGX supports integration with existing network infrastructure and offers device profiling, risk assessment, and compliance reporting to address security requirements. Its core functionality focuses on minimizing network vulnerabilities by ensuring only authorized devices can access resources, helping businesses maintain visibility and control over endpoint activity within corporate environments.
S3M Security is a cyber security company that focuses on software development and provides comprehensive services in network and information security. Founded by people with more than 20 years of experience in the industry, S3M Security operates in the Americas, Europe, Middle East, Asia and Africa regions.
Cisco Access Manager is a software designed to facilitate secure and centralized management of network access for enterprise environments. The software provides tools for configuring and monitoring user authentication, authorization, and accounting across wired and wireless networks. It supports deployment and policy management for network devices, helping organizations enforce security policies and streamline access control. Cisco Access Manager addresses the business need for scalable and consistent network access management by reducing administrative complexity and supporting compliance requirements. The software integrates with other network infrastructure components to deliver visibility and control over user activities while maintaining system security and operational efficiency.
NAC Appliance (Legacy) is a network access control software that provides centralized authentication, authorization, and management of devices connecting to a network. The software is designed to enforce security policies by assessing device compliance and controlling user access based on predefined criteria. It supports a range of deployment options, including agent and agentless modes, to accommodate various network environments. NAC Appliance (Legacy) enables organizations to monitor network activity, block unauthorized devices, and respond to potential threats through automated enforcement actions. The software addresses business challenges related to network security, compliance, and operational efficiency by ensuring that only authorized and compliant devices can access network resources.
ExtremeControl is a network access control software designed to enable organizations to manage secure access to wired and wireless networks. The software provides visibility into all connected devices, allowing administrators to authenticate, profile, and monitor endpoints, users, and applications. It features policy enforcement for user and device access based on roles, location, and time, helping organizations ensure compliance with security requirements. The software integrates with existing network infrastructure and third-party security systems to automate threat response and support rapid remediation of security incidents. By controlling network admission and access rights, ExtremeControl addresses the business challenge of preventing unauthorized access and mitigating risks associated with network breaches and device proliferation.
Genian Network Access Control (NAC) from Genians enables organizations to secure and manage all network-connected devices across IT, OT, IoT, and cloud environments. The solution provides complete visibility into endpoints by profiling devices, monitoring behavior, and enforcing access policies without requiring agents on every device. Genian NAC supports diverse deployment models including on-premises, cloud-managed, and hybrid, offering flexibility for enterprises of all sizes. It integrates with existing infrastructure to streamline compliance, automate device onboarding, and prevent unauthorized access. By leveraging Genians’ Device Platform Intelligence, the solution continuously classifies and manages endpoints, ensuring real-time control and security posture assessment. Enterprises worldwide use Genian NAC to strengthen Zero Trust initiatives by extending granular access control and adaptive policy enforcement across distributed networks.
eScan Corporate Edition is a software designed to provide endpoint security and protection for networked computers within organizations. This software offers features such as real-time protection against viruses, malware, spyware, and ransomware, as well as advanced security tools including anti-phishing components and web filtering. It includes endpoint security management, device control, data loss prevention, and firewall configuration for centralized administration and reporting. The software also supports automatic updates, application control, and proactive detection to help address security vulnerabilities and prevent unauthorized data access. eScan Corporate Edition is utilized to maintain security compliance and minimize threats within enterprise IT environments.
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.
