Skip to main content

Building a Zero Trust Campus: Zero Trust Access

Authentication Methods in the Nile Access Service: Building a Zero Trust Campus

The Nile Access Service is built on the principles of the "Zero Trust Campus," ensuring that no user or device is implicitly trusted. By implementing strong authentication methods and granular access controls, the Nile Access Service helps organizations secure their network resources and protect against unauthorized access.

The following authentication methods are supported within the Nile Access Service, each playing a crucial role in establishing a Zero Trust Campus:

  1. Wired and Wireless 802.1X
  2. Single Sign-On (SSO)
  3. MAC Authentication Bypass (MAB)

Let's review each of these in more detail.

Wired and Wireless 802.1X: Strong Authentication for Zero Trust

802.1X is an IEEE standard for port-based network access control, providing strong authentication and encryption for both wired and wireless connections. By implementing 802.1X, organizations can ensure that only authenticated users and devices can access network resources, aligning with the principles of the Zero Trust Campus.

Nile's implementation of 802.1X offers:

  • Integration with existing RADIUS infrastructure for centralized authentication and authorization
  • Granular access control based on user identity and device posture fingerprint.Shiv> We dont do device posture. However we plan to integrate with Crowdstrike in the futre to offer device posture based access.
    JR> I recall mention of device fingerprinting somehow being used?
  • Centralized policy management through the Nile Customer Portal 

Learn more about configuring 802.1X in the Nile Access Service to strengthen your Zero Trust Campus.

Single Sign-On (SSO): Streamlining Zero Trust Access

Single Sign-On allows users to access multiple applications with a single set of credentials, streamlining the user experience while maintaining the principles of the Zero Trust Campus. By integrating SSO with the Nile Access Service, organizations can enforce consistent authentication and authorization policies across their network resources.

Nile's SSO integration provides:

  • Support for popular SSO protocols, including SAML, to ensure compatibility with leading identity providers.
  • Centralized SSO configuration through the Nile Customer Portal

Discover how SSO can be seamlessly integrated into the Nile Access Service to enhance your Zero Trust Campus.

MAC Authentication Bypass (MAB): Securing Devices in a Zero Trust Campus

MAC Authentication Bypass is an authentication method that grants network access based on a device's MAC address. While MAB is useful for devices that don't support 802.1X, it's essential to implement additional security measures to maintain the integrity of the Zero Trust Campus.

Nile's MAB implementation includes:

  • Quarantine all new devices by default
  • Centralized MAB configuration through the Nile Customer Portal
  • Create custom rules based on match criteria;
    • Exact MAC address
    • Fingerprint
    • MAC OUI
  • Optionally Integration with external MAC address databases (e.g Aruba ClearPass and Cisco ISE) for granular access control

Explore the configuration and best practices for MAB in the Nile Access Service to secure devices within your Zero Trust Campus.

By leveraging these authentication methods and following best practices, organizations can build a robust Zero Trust Campus with the Nile Access Service, ensuring secure access to network resources and protecting against unauthorized access.

RL -> We are also releasing wired SSO soon. In the below table, we can write wired and wireless SSO just like you have it on for 802.1x.

In the benefits of SSO, should we write about the SCIM protocol and its benefits of real time user information? 

Authentication Comparison

Authentication Method Description Zero Trust Campus Benefits

Wired and Wireless 802.1X		 - IEEE standard for port-based network access control
- Supports various EAP methods (PEAP, EAP-TLS, EAP-TTLS)
- Provides strong authentication and encryption		 Ensures only authenticated users and devices access network resources
Enables granular access control based on user identity.
Integrates with existing RADIUS infrastructure for centralized management

Single Sign-On (SSO)		 - Allows users to access multiple applications with a single set of credentials
- Supports popular SSO protocols (SAML, OAuth, OpenID Connect)
- Reduces password fatigue and improves user experience		 Enforces consistent authentication and authorization policies
Provides granular access control based on user attributes and group membership
Streamlines user experience while maintaining Zero Trust principles

MAC Authentication Bypass (MAB)		 - Authenticates devices based on their MAC address
- Useful for devices that don't support 802.1X (printers, IoT devices)
 Provides network access for devices that can't support 802.1X
Serves as a fallback method to ensure maximum device coverage
Centralized configuration through the Nile Customer Portal

 802.1x Authentication, Single Sign-On (SSO), MAC Authentication Bypass (MAB)

No Comments
Back to top