October 30, 2009
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Solid features with IPS capability
- Weaknesses: The management console is awkward to use at first
- Verdict: Lots of features make this one worth looking at closely as you select a NAC device
CounterACT is an out-of-band, agentless network access control device that accesses network devices by using service level authentication credentials to scan against the assigned policies put in place by the network administrator. It can also use either a persistent or dissolvable agent to manage and scan guest devices on the network.
Setup and initial configuration were straightforward. Once the appliance was connected to the network and booted, we had to configure a couple of parameters via a console connection and then we were able to connect to it via the management application and run the setup wizard. This wizard quickly guided us through the general network setup, including LDAP and switch configurations.
After initial setup is complete, management is done using the management console application. This was slightly overwhelming and awkward to use at first, but after browsing around it a little while it became easier to use.
While the management of the appliance is quite tricky at first, CounterACT has a lot to offer on the performance side. The appliance features a solid policy engine and administrators can automate a lot of the policy tasks for simplicity and ease of use. It features a full-scale IPS policy that can isolate hosts and prevent them from scanning or attacking the network from inside.
A PDF installation and a console user guide were supplied. The installation guide provided in-depth instructions for both the appliance and the management console application.
The console user guide illustrated how to set up and manage the appliance through the console, as well as advanced configuration tasks. Both guides included many screenshots, step-by-step instructions and configuration examples.
ForeScout provides two levels of support as part of a maintenance contract. Standard support is available 8/5 and the advanced support package is 24/7. These include phone and email-based technical support, as well as access to an online knowledgebase and support area.
At a price coming in at just over c£3,000, this product is good value for the money. The CounterACT appliance provides a lot of control features, with some extra capability, at a fairly low price.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry