Partnership Will Drive Increased Adoption of Portnox’s Cutting-Edge NAC Solution Purpose-Built for Large Distributed Organizations in the Region
LONDON — Portnox, which supplies network access control (NAC), visibility and device risk management to organizations of all sizes, today announced that it has partnered with Distology for the sole distribution and resell of its cloud-delivered NAC-as-a-Service solution in the United Kingdom and Ireland.
We chose to partner with Distology because of their successful history of IT security solution distribution in the UK and Irish markets, said Portnox CEO, Ofer Amitai. Were confident this collaboration will yield tremendous growth for both parties, as Portnox has a unique value proposition and Distology has the market enablement expertise to effectively evangelize our network security offering.
We have a long-established relationship with Portnox and it speaks volumes that the team have decided to choose Distology as their sole UK&I distributor. The technology Portnox brings to the market is incredibly exciting and complements our existing vendor stack effortlessly, said Stephen Rowlands, Head of Sales for Distology. Were especially looking forward to representing and promoting Portnox Clear to our growing partner base, as this brand-new cloud-based technology has potential to completely disrupt the market and we foresee masses of growth potential in this innovative product.
Portnox introduced its cloud-delivered NAC-as-a-Service solution to the UK & Irish markets less than two years go. As the first to bring NAC to the cloud, Portnox has quickly gained a foothold in the region, particularly among large distributed enterprises in the retail, construction and utilities industries.
The adoption of our NAC-as-a-Service product in the UK has been very strong to date, said VP of Products, Tomer Shemer. This is a testament to the fact that the UK is one of the markets leading the trend of cloud security adoption. We expect to see continued growth in the coming years in this area of Europe.
Portnox is set to exhibit at this week’s RSA 2020 Conference (booth #4234) in San Francisco, February 24-28. Additionally, Portnox (booth #G108) and Distology (booth #C40) will both be exhibiting at InfoSec Europe 2020, Europes largest event for information and cyber security, in London, June 2-4.
Distology is a Market Enabler and offers true value for the distribution of disruptive IT Security solutions. The vendors we work with represent innovative and exciting technology that continues to excite and inspire their reseller network. Our ethos is based on trust, relationships, energy and drive and offers end to end support in the full sales cycle providing vendor quality technical and commercial resource.
The threat behind MAC spoofing
When implementing any insurance policy, you need to start with estimating the level of risk, the probability of that risk, and the potential damage should that risk become a reality.
One of the network risks that is often presented to demonstrate the ineffectiveness of 802.1x solutions is the ease of bypassing modern network access control (NAC) by using MAC spoofing. Usually, this involves spoofing the network printer or other vulnerable device.
Now, let’s put aside the fact that network printers today can support certificate or credential-based authentication, and that certain products have remedies against such attempts even when the authentication is based on MAC.
Let’s consider: is MAC spoofing a legitimate threat or an exaggerated, manageable flaw?
But before I try to analyze this risk, I want to point out the biggest advantage a NAC solution can give an organization to cope with modern cyber security threats: the ability to apply dynamic segmentation based on device type or identity.
Without going into too much detail, NAC is one of the only systems that can help you prevent lateral movement, indirectly allowing you to identify breaches and directly helping you to prevent the compromise of your crown jewels.
The threat landscape
Here are some of the most common adversaries when it comes to MAC spoofing:
- The employee – a disgruntled current or former employee
- The guest – a contractor, customer, patient, etc. who physically visits your organization for a period of time
- The hacker – a malicious person trying to attack your network and steal information, causing harm to your organization
And here are the most common attack surfaces:
- Wired, ethernet switches
One caveat: most wifi environments contain managed devices. So, for devices that do not have an 802.1x supplicant, and thus does not support certificate-based authentication (or credentials based), it is easy to setup an isolated segment and significantly lower the risk of attack.
As such, we’ll put our focus on examining wired environments, and how they’re vulnerable to the above adversaries.
Let’s be clear – MAC spoofing requires some technical knowledge to execute, which the non-technical lay person typically does not possess. Those doing it know what they’re doing, and they know it’s wrong.
With that said, it’s important to point out that a lot of damage is caused by the unintended – i.e. people clicking on a link in an email, deleting the wrong record or file, or even dropping a laptop into a pool.
Employees should be trustworthy. If they’re not, cyber security is likely not your problem. But, when someone is fired, laid off, or even just mistreated at work, there always exists the potential for them to hold a grudge. It’s human nature.
Disgruntled employees can pose a big risk. If an employee still works for an organization and he/she is determined to do damage, that’s a problem that’s nearly impossible to prevent. The network connection alone is not going to stop he/she from stealing data or worse. This individual likely already has access through other corporate devices and the credentials to access whatever data he/she wants.
At the end of the day, however, this individual’s risk of MAC spoofing can be categorized as “very low” with “low” probability and “low” potential for damage. The reason being is that the potential damage done is not necessarily related to network connection. The first line of defense against a disgruntled current of former employees is physical barriers – i.e. locked doors and other physical security.
A guest visiting your office might want to connect to your network. Most likely, this guest will not go to great lengths to hack your network if they are initially blocked. By supplying a guest network, such as a guest wifi, you will effectively eliminate that risk all together. Thus, like the employee, this individual’s risk of MAC spoofing can be categorized as “very low” for both probability and damage.
A hacker will need physical access to your network in order to do his/her job. Today, spearhead attacks can enable hackers to access your networks from afar. Doing so, however, typically requires some sort of motive.
This motivation is often dependent upon the type of business you operate. If you’re in military and defense, for example, you likely have a higher than average risk of being the target of such an attack. The same going for banking and financial services, healthcare and any other industry with highly sensitive and confidential data.
For most organizations, the threat of physical access hacking is typically low, while the potential for damage could be high. Should a retailer fear physical burglary just because a new device has connected to its network? I think not.
For most organizations, the risk of MAC spoofing is almost non-existent. This is usually fairly easy for an auditor to demonstrate, and would appear as part of a comprehensive security report. So in reality, the perception of the threat is that it’s a much larger problem than it actually is.
You can also prevent MAC spoofing by implementing stronger authentication methods that are fairly common today. One of the major roles of NAC is to provide secure authentication and authorization to the network. Thus, even if authentication is somehow breached, authorization serves as a second layer of defense that can limit access by putting potential individuals of risk in a specific “narrow” segment.
The segmentation of specific types of MAC-based devices is a best practice in NAC. Even if spoofing occurs, such a device won’t be able to access a particularly sensitive VLAN, such as those in Finance or HR, if proper segmentation has been established through your network security policies.
Integration of Okta with Portnox CLEAR delivers seamless & secure identity management solution for NAC platform customers
NEW YORK–Portnox, which supplies network access control, visibility and device risk management to organizations of all sizes, today announced its newest integration with Okta, Inc., the leading independent provider of identity for the enterprise.
“Our recent integration with Okta for improved IAM will make the self-onboarding process easier and more secure for new and existing Portnox CLEAR customers who already rely on Okta for single sign-on (SSO) and identity management,” said Tomer Shemer-Buchbut, Vice President of Product at Portnox. “Portnox CLEAR customers can now take advantage of our simplified, cloud-delivered NAC platform with a built-in integration with Okta – out of the box,” continued Shemer-Buchbut.
Portnox CLEAR is a cloud-delivered service for automated network visibility and access control management (NAC as-a-Service) providing control of IoT, as well as managed and unmanaged devices. The platform’s integration with Okta Universal Directory now allows Portnox CLEAR end-users to enroll their devices into CLEAR and connect to organizational networks using their corporate Okta accounts. Additionally, organizational administrators now have the ability to log into their CLEAR portal from their Okta user portal using SAML SSO.
“This integration signifies our commitment to improving and further simplifying the Portnox CLEAR user experience from start to finish,” said Portnox CEO, Ofer Amitai. “With Okta’s industry-leading Identity-as-a-Service platform, we’ve further strengthened the Portnox product offering and helped many of our customers extend their SSO requirements to their network security efforts,” added Amitai.
Okta is the leading independent provider of identity for the enterprise. The Okta Identity Cloud enables organizations to securely connect the right people to the right technologies at the right time. With over 6,000 pre-built integrations to applications and infrastructure providers, Okta customers can easily and securely use the best technologies for their business. Over 7,000 organizations, including 20th Century Fox, JetBlue, Nordstrom, Slack, Teach for America and Twilio, trust Okta to help protect the identities of their workforces and customers.
Cloud-delivered network security solution & subscription-based business continues to fuel revenue growth for cybersecurity firm
NEW YORK–Portnox, a leading provider of network access control, visibility and device risk management solutions, today announced that third quarter revenue for 2019 surpassed the same period for 2018 by 40%. Driving this year-over-year growth is the increasing adoption of Portnox CLEAR, the only cloud-delivered network access control (NAC) solution on the market today.
“We bet big on Portnox CLEAR and the SaaS business model,” said Portnox CEO, Ofer Amitai. “We knew that mid-market companies and large enterprises alike – particularly in the U.S. and U.K – would begin to demand cloud-delivered solutions for network access control. We’ve seen this prediction prove itself out over the last year or so, and we’re excited to help more and more organizations properly secure their network in the cloud and sleep well at night.”
Portnox CLEAR is the first cloud-delivered NAC-as-a-cloud-service solution that controls access using continuous risk-scoring of each endpoint; including mobile, BYOD and IoT, connecting from anywhere in the world. It is purpose-built to simplify the complexities associated with implementing NAC, while ensuring organizations have the necessary network visibility and access control mechanisms to protect against non-compliant and rogue devices that can introduce security risks.
In nearly every corner of the globe and across every sector and area of tech, cloud adoption is thriving – from SMBs all the way to large enterprises. In the U.S., 84% of enterprises have implemented a multi-cloud strategy, and spending on cloud services as grown 24% since 2018. In the U.K., cloud adoption among organizations has risen nearly 20% in less than five years. These figures shine a light on a massive transition off of on-premise software solutions to SaaS subscription models. As this new revenue stream grows, many vendors are shifting their focus to developing new cloud offerings, leaving fewer and fewer resources for legacy product innovation.
Earlier this year, Portnox was named Best Network Access Control Solution in Cyber Defense Magazine’s 2019 InfoSec Awards at the RSA Conference in San Francisco, CA. Portnox will return to the RSA Conference in February 2020. More recently, Portnox received the award for Most Valuable Vendor for MSPs (managed service providers) at MSPWorld 2019 in Las Vegas, NV. Since the start of 2019, Portnox has expanded its market focus beyond traditional business-to-business – now offering a comprehensive self-service, multi-tenant portal for MSPs to manage network security for their full portfolio of clients.