What specifically does EMBASSY Endpoint Enforcer (EEE) protect against?
EEE works in conjunction with a Network Access Control system to protect against lying endpoints or clients that have been infected or tampered with to lie about their health state to the NAC system. EEE also ensures that the client components of the NAC system have not been tampered with and that the system metrics for the boot-up process are accurate. One way that EEE mitigates the problem of endpoints that lie about their health, also called lying endpoints, is to add a layer of hardware and software protection. By harnessing the power of industry standard hardware security chips called Trusted Platform Modules (TPMs), now shipping on most business-class laptops and PCs today, network administrators can validate platform integrity and the integrity of the NAC system components. The TPM and associated software, in concert with a NAC system verifies the health of the PC and whether the NAC components can be trusted prior to passing control to the NAC system for further investigation.
