Forescout Technologies, Inc.

Tomer Reisner

Kevin Benjamin Mayer

Oded Comay

Oren Nechushtan

Gilad Walden

Svetlana Khanin

Ilya Fainberg

Systems, methods, and related technologies for access control management are described. The access control management may be customized for an entity and be configured on an enforcement point closest to the entity. In certain aspects, an entity communicatively coupled to a network is selected and one or more characteristics of the entity determined. An access policy may be selected based on the one or more characteristics of the entity and one or more enforcement points closest to the entity determined. One or more access rules to be assigned to the one or more enforcement points based on the access policy may be determined, wherein the one or more access rules are specific to the entity based on the one or more characteristics of the entity. The one or more access rules assigned to or configured on the one or more enforcement points closest to the entity are assigned.

Adaptive access control management

Systems, methods, and related technologies for device identification and policy enforcement using Power over Ethernet (PoE) are described. In certain aspects, a communication that originates from a Power over Ethernet (PoE) enabled device can be received. The communication can be processed to determine a characteristic of the device. An action can be initiated based on the characteristic.

Device identification and policy enforcement using power over ethernet (PoE)

Systems, methods, and related technologies for access control management are described. The access control management may be customized for an entity and be configured on an enforcement point closest to the entity. In certain aspects, an entity communicatively coupled to a network is selected and one or more characteristics of the entity determined. An access policy may be selected based on the one or more characteristics of the entity and one or more enforcement points closest to the entity determined. One or more access rules to be assigned to the one or more enforcement points based on the access policy may be determined and the one or more access rules assigned to or configured on the one or more enforcement points closest to the entity.

A network access control (NAC) device detects a connection of an endpoint device at a network switch coupled to a network and restricts access of the endpoint device to prevent the endpoint device from accessing resources of the network. The NAC device establishes a connection with the endpoint device, validates a client certificate corresponding to the endpoint device to authenticate the endpoint device as a corporate device and grants the endpoint device access to the resources of the network.

Growing community of inventors

Rehovot, Israel

Tomer Reisner