A real business problem

Ensure compliance

You have an employee who connects his laptop to your company network in different ways - directly to the network when he's in the office, uses a broadband connection at home, and public WiFi while travelling. Now he's on vacation and has taken the laptop with him so his family can surf the web.

You want to ensure his laptop obtains recent updates to your company's security policy, but you can't because it isn't currently connected to your network. You also suspect that he has disabled his firewall when connecting to the network via broadband and WiFi.

How can you ensure his laptop does not fall out of compliance with your security policy?

Sophos NAC can…

…ensure that you can check employees' laptops even when they are not connected to your network.

Sophos NAC policy servers can be set up so the Agents can communicate via the internet, even if the laptop is not on the corporate network. When communication is established any new anti-malware signatures or patch definitions are automatically downloaded onto the laptop, ensuring it stays compliant while outside the corporate network and without you or the user needing to take any action.

If you don't allow laptops to communicate with their servers via the internet, the Sophos NAC Agent uses the currently cached policy on the hard drive, ensuring that the laptop remains consistent with your security and acceptable use policy until it is next updated.

How compliant is your computer?

Assess the security status of your computer right now with the Endpoint Assessment Test.

Take the test