simpl.
Connexion
GRC Cybersécurité 13 points

Network Access Control (NAC) Deployment Review

Cette liste de contrôle est en anglais.

Reviews a network access control deployment covering authentication, device posture, guest and IoT handling, dynamic segmentation, and enforcement.

IEEE 802.1XNIST 800-53CIS

PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.

Authentication

  • Is 802.1X authentication enforced on wired and wireless access ports? *
  • Are certificate-based (EAP-TLS) methods used for managed devices where feasible?
  • Is MAC Authentication Bypass (MAB) restricted and inventoried for non-802.1X devices? *
  • Is the RADIUS/policy server highly available and integrated with the identity provider? *

Device Posture

  • Is endpoint posture (patch level, EDR presence, disk encryption) assessed before granting access? *
  • Are non-compliant devices quarantined to a remediation VLAN? *
  • Is device profiling used to classify unmanaged and IoT devices? *

Guest & IoT

  • Are guest devices isolated to a segregated network with captive portal onboarding? *
  • Are IoT/OT devices placed in dedicated segments with least-privilege access policies? *
  • Are unknown or unauthorized devices denied or restricted by default? *

Enforcement & Monitoring

  • Is dynamic VLAN or SGT/ACL assignment used to enforce role-based segmentation? *
  • Are NAC authentication and enforcement events logged to a SIEM? *
  • Is there a documented fallback/monitor-mode process to avoid production outages during rollout?

Téléchargez la liste de contrôle Network Access Control (NAC) Deployment Review complète

Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.