Replies to post #223009 on Wave Systems Corp. (fka WAVXQ)

[wavxmaster]

Excerpt from a Case Study
Complete case study details as well as other case studies are available at
http://www.trustedcomputinggroup.org/solutions/network_security
GLOBAL PROFESSIONAL SERVICES FIRM IMPLEMENTS TRUSTED
COMPUTING GROUP’S TRUSTED NETWORK CONNECT (TNC)
SPECIFICATIONS

TNC Enables Consistent, Standards-Based Health Checking Across a Diverse and Complex Organization

Ensuring only known, healthy devices compliant with policies can protect the corporate network against
viruses, malware, rootkits and attacks. One large global professional services organization has implemented
Trusted Computing Group’s Trusted Network Connect (TNC) specifications for just this.
One of the world’s best known and largest professional services firms, with more than 100 partnerships
networked across 150 countries depends on its global IT infrastructure for shared computing services.
To further complicate this distributed, high-value and highly regulated environment, the vast majority of the
workforce is mobile. Many users rely on IT to support remote access, visitor access, and easy secure file
exchange.
The IT experts first implemented a common authentication system across its infrastructure to function
across LANs, applications, WiFi networks and then through its remote access solution.
The use of standardized technologies allowed for the implementation of a cohesive policy and IT policy
management with the agility of choosing products from various vendors. By adhering to a single standard
across these devices and using the Trusted Platform Module (TPM) built into their existing laptops, IT was
able to drive down the average cost or remote access per user per year.
The IT team turned to products embedding TNC specifications to conduct pre-admission health checks when
users request connectivity to the network. The initial rollout of TNC-based health checking was
straightforward. The objective was to check some fundamental security controls, without posing a risk to
daily operations. The pre-admission health check includes the following six simple IT policy checks:
1. Disk encryption
2. Anti-virus on
3. Anti-virus updated
4. Personal firewall on
5. Screensaver guidelines
6. Internet connection sharing off
In the short term, this professional services firm will add policy checking for more criteria and allow
individual partnerships to make choices and additions to those policies, layering a comprehensive set of
Copyright © 2004 – 2012 Trusted Computing Group Page 9
(www.trustedcomputinggroup.org.) All Rights Reserved.
security automation checks. The longer term vision is to use TNC expansively across its network for security
checking on various levels.
It also plans to expand the policy controls to support increased needs for collaboration, extranets, business
partners and customer network access.