Mandy Andress
Security hardware and software
More about Andress' lab
Mandy Andress's resume (PDF)
Recent tests and articles
Andress is President of ArcSec Technologies, a firm focusing on security assessments, product reviews, and analysis. ArcSec Technologies has been retained by leading security organizations and Fortune 100 companies to evalute new security products as well as the effectiveness, ease-of-use, and functionality of security implementations in commercial technology products.
Prior to starting ArcSec, Andress served as the Chief Security Officer for several technology start-ups in addition to working for several years in Big 5 consulting. Andress's credentials include the following designations: CISSP, CPA, CISA, SSCP, CCSE, CWNA. She is also a frequent contributor to many publications and the author of several books, including Surviving Security 2nd edition. Andress is also active on the conference circuit, speaking at Black Hat, NetWorld+ Interop, and numerous other conferences.
She can be reached at mandy@arcsec.com.
Recent tests and articles by Mandy Andress:
Review: Cisco NAC Appliance hits on basic enforcement, but lags in advanced features - ...
Jul. 30, 2007
Cisco's NAC Appliance 4.1 (formerly called Cisco Clean Access) provides basic NAC functionality like antivirus and patch status checks, but remains behind many of the other vendors in this space due to the inability to ...
Check Point Integrity shines in NAC policy management
Jul. 30, 2007
Check Point Integrity NGX brings to fruition the integration of the endpoint- security technology purchased with Check Point's ZoneLabs acquisition and Check Point's signature firewall product line.
Juniper holds its own for all-in-one NAC with Infranet Controller
Jul. 30, 2007
Unified Access Control is Juniper's overall architectural answer to NAC, and the company's Infranet Controller server software lies at the center of the architecture.
ConSentry switches NAC around a bit
Jul. 30, 2007
ConSentry integrates standard functionality for network-access control directly into a switch device it calls LANShield — which then replaces your existing access switches.
NAC alternatives hit the mark
Jul. 30, 2007
Symantec tops Juniper, Cisco and Check Point in test of 13 NAC point products.
McAfee NAC hits on endpoint assessment, but misses on other standard access-control ...
Jul. 30, 2007
McAfee NAC has a strong foundation in the breadth of security checks it can render, and it's got strong ties to McAfee's mature endpoint-security management platform, but it lacks some standard NAC capabilities, such as ...
Trend Micro Network VirusWall NAC hones in outbreak prevention
Jul. 30, 2007
Trend Micro's Network VirusWall Enforcer focuses on outbreak prevention -- identifying and preventing malware outbreaks – which makes sense since the company has a long history in that segment of the security market.
Bradford Networks' NAC Director directly controls network-switch flow
Jul. 30, 2007
Bradford Networks' NAC Director takes a slightly different approach than the majority of products tested. It provides port-based NAC functionality that does not require upgrading your entire network infrastructure to ...
InfoExpress attempts a sort of peer-to-peer NAC enforcement
Jul. 30, 2007
InfoExpress approaches network-access control with a product that requires zero network-infrastructure changes.
Lockdown Networks enforces NAC at the switch without network interruption
Jul. 30, 2007
Lockdown Networks Enforcer functions in a similar fashion to Bradford Networks' NAC Director in that it enforces access policy by physically controlling a standard network switch through SNMP and direct command-line ...
Symantec tops the NAC ticket with its breadth of coverage
Jul. 30, 2007
No silver bullet put Symantec Network Access Control on the top of the heap. Rather it edged out the competition for its breadth of coverage in the areas of deployment options, end point assessments and flexible policy ...
Vernier's EdgeWall offers NAC plus security
Jul. 30, 2007
With little network integration required, Vernier provides standard assessment functionality for network-access-control with its EdgeWall product. But it also joins competitor's ConSentry and ForeScout in the class of ...
ForeScout CounterACT delivers on agentless NAC
Jul. 30, 2007
The ForeScout CounterACT appliance monitors trunk and span ports on the switch to which its attached, sniffing network traffic to understand the status of devices and ensuring they adhere to the required security ...
StillSecure provides flexible NAC with SafeAccess
Jul. 30, 2007
StillSecure Safe Access is an appliance that can be deployed in three scenarios – as part of an 802.1X authentication scheme, sitting in-line or working in conjunction with DHCP server.
How we tested NAC appliances
Jul. 30, 2007
Here's what was included in our all-in-one NAC product test bed.
Oracle jumps to the forefront of ID-management market
Jan. 22, 2007
The latest edition of Oracle's Identity Manager builds on the core provisioning functionality the company acquired with its 2005 purchase of Thor Technologies with new deployment, workflow, diagnostics and attestation ...
Identity Engines enables central policy management
Dec. 18, 2006
In this Clear Choice Test, an identity-management appliance called Identity Engines' Ignition Server proved to be adept at aggregating control of multiple user repositories and devices once we got used to the somewhat ...
A10 provides simple, ID-based provisioning tool
Dec. 11, 2006
Our Clear Choice Test of A10 Networks' IDSentrie shows this software package bucks both trends: It provides a simple tool for provisioning accounts and synchronizing passwords across multiple repositories and enables ...
Patch-management products move toward remediation
Dec. 11, 2006
Patch-management products have evolved from simply pushing out patches to now encompassing more preemptive security measures, including manipulating security configuration settings, deploying standard software packages, ...
How we tested remediation systems
Dec. 11, 2006
Our Clear Choice Test of remediation systems used Windows 2003 Enterprise Edition running on a server with a 2.5GHz CPU and 2GB of RAM.
 |
 |
 |
|||||
|
 |
|
|
|
|||
