{"id":48842,"date":"2022-10-12T20:04:00","date_gmt":"2022-10-12T20:04:00","guid":{"rendered":"https:\/\/www.csoonline.com\/article\/3676232\/portnox-adds-iot-fingerprinting-to-network-access-control-service.html#tk.rss_security"},"modified":"2022-10-12T20:04:00","modified_gmt":"2022-10-12T20:04:00","slug":"portnox-adds-iot-fingerprinting-to-network-access-control-service","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/portnox-adds-iot-fingerprinting-to-network-access-control-service\/","title":{"rendered":"Portnox adds IoT fingerprinting to network access control service"},"content":{"rendered":"
<\/div>\n

Network security firm Portnox on Wednesday announced it is adding IoT<\/a> fingerprinting features to the Portnox Cloud NAC-as-a-Service to allow companies to more easily identify and authorize devices on their networks. The IoT fingerprinting features add new device-identification techniques to the network access control <\/a>product, including MAC address clustering and DHCP (Dynamic Host Configuration Protocol)<\/a> gleaning. <\/p>\n

Portnox is a  zero trust<\/a> access control company focusing on network security. Its IoT fingerprinting techniques are designed to profile devices that sit on the network but cannot communicate complete identifying information such as version number, model or even device type due to lack of storage or computing power.<\/p>\n

IoT fingerprinting gathers information on what devices are on the network, what they are being used for, and who is using them. It is specifically used in the case of devices such as cameras, TV, printers, medical devices, and factory devices. Many IoT devices such as these do not have enterprise-level security\u2014a big problem for network engineers and security teams.<\/p>\n

\u201cOur customers and prospects have a lot of anxiety about these devices,” said Denny LeCompte, CEO of Portnox. “They want to make sure only the right devices get onto the network. There is also an increasing proliferation of shadow IT,<\/a> wherein somebody has just plugged a device into the network and the IT team does not know about it. It could be an innocent act but the same can be used or done by attackers as well,\u201d<\/p>\n

Portnox\u2019s core product follows a whitelist of MAC addresses for devices that can be allowed to connect to a network. However, this raises concerns about MAC address spoofing<\/a> and other ways in which attackers can hide behind IoT devices. <\/p>\n

\u201cThe next problem faced is that while the IP and MAC addresses are available, it is not known what device it is. The IoT fingerprinting gathers information to tell the organization what each device is,\u201d LeCompte said.  <\/p>\n