Fine-Grained Identity & Access Management for the Enterprise

Effective Network Access Management

Providing full network access to anyone within your enterprise is no longer prudent nor allowed by law. Not every employee should have access to your financial records, and the people accessing your financial records probably do not need to be looking at the organization’s human resources files.

A step forward from most of today's RADIUS servers, the Ignition™ appliance from Identity Engines is able to help network administrators control which network users have access to each network area, by utilizing a powerful, fine-grained policy engine that does identity routing based on any number of combinations of variables.

Identity Management Impedes the Enemy Within

Studies by the Computer Security Institute and others show that most attempts to violate network security are by people who once had legitimate access to corporate networks, but whose relationship with the enterprise has ended. The reason they get away with it is that, in this day and age, when employees (and even on-site guests) are given access to the company network, they are given access to the whole network. And that just doesn’t make sense.

Someone in the Marketing department need not—and should not—snoop around files from Accounts. And while an on-site accounting audit team might benefit from right to use Finance materials, they need not—and should not—be allowed to access material from Sales.

The Identity Engines Ignition platform makes it easier than ever to introduce enterprise-wide network access policies for different types of employees, consultants, clients, suppliers and guests—this is identity management at its best!

Enabling Easy Deployment

The benefits of the Ignition platform do not stop there.

Network administrators can often be bogged down by how they manage the inconsistencies across multiple directories—often even different types of directories—throughout a global organization.

Ignition helps IT teams sort out who’s who and what network areas they should be accessing, making integration easier than ever. With its sophisticated policy engine, Ignition enables to network administrator to easily group both the sales associates and the consultants into a single network policy, freeing up more of the network administrator’s time and saving the company administration dollars.

Easing Compliance, Integration and Expansion.

Ignition also helps streamline compliance audits, since the appliance can keep track of device logs across the enterprise and compile the information into a single, usable report.

Besides helping organizations comply with Sarbanes-Oxley, Health Insurance Portability and Accountability Act (HIPAA) and other regulations by logging and limiting access to users that need to know, the Ignition appliance furthermore helps ease the IT challenges of integrating new business units or even new businesses into your enterprise.

As your organization expands, Ignition not only helps to seamlessly integrate new users into your network, but can also help ease the administration of a growing network by allowing new protocols and new features to be added – in addition to the already extensive list of protocols and identity stores, including RADIUS, RSA’s Authentication Server, Microsoft Active Directory, Lightweight Directory Access Protocol, 802.1x and more—providing long-term investment protection.

Getting the Most of Every Device

Organization often purchase network devices based not only on what need it fulfills today, but what need it will realize tomorrow. Unfortunately, in some cases the needs of tomorrow are never met—not because the equipment isn’t already in place, but because network administrators lack the time to deploy and manage new, extended services.

Ignition solves the problem of underutilized network devices by allowing network administrators policy deployment through a centralized policy management system.