--- title: "Verifying 802.1x in enterprise networks" id: "7531" type: "post" slug: "verifying-802-1x-in-enterprise-networks" published_at: "2019-02-05T14:30:35+00:00" modified_at: "2019-02-05T14:30:35+00:00" url: "https://ipfabric.io/blog/verifying-802-1x-in-enterprise-networks/" markdown_url: "https://ipfabric.io/blog/verifying-802-1x-in-enterprise-networks.md" excerpt: "Companies are spending big money on defensive measures against the outside attackers — investing into Next-Generation Firewalls, Intrusion Prevention Systems and Proxies. The inner network, however, was considered safe place, where nothing bad can happen. This understanding has thankfully changed..." taxonomy_category: - "Security" --- # Verifying 802.1x in enterprise networks [https://ipfabric.io/author/vladislav-bartosik/](https://ipfabric.io/author/vladislav-bartosik/) [Vladislav Bartosik](https://ipfabric.io/author/vladislav-bartosik/) Author Published 5 Feb 2019 Updated 5 Feb 2019 Companies are spending big money on defensive measures against the outside attackers — investing into Next-Generation Firewalls, Intrusion Prevention Systems and Proxies. The inner network, however, was considered safe place, where nothing bad can happen. This understanding has thankfully changed in recent years, especially with rise of mobility technologies allowing employees to work anywhere and concepts like Bring Your Own Device (and some major incidents as well, of course). Today’s network administrator has to think about various types of devices connecting to the internal network and policy, how to treat them to keep the internal network and business critical systems safe. --- ## Solution Solution to this problem is to deploy network wide 802.1 x protocol, that allows the user to access the network just if he is able to authenticate himself using a username and password, or a valid certificate issued by the company. Various options are available and listing all the details would be worth a book. It is not always straightforward deployment, as these types of projects tend to be slow and need proper user testing, because otherwise the users won’t be able to work at all. Usually there are user machine issues that need to be rectified temporarily by disabling the 802.1 x protocol authentication on the switchport of the affected user and after couple days, no one knows, where the security is applied and where it is not. --- ## Verification With IP Fabric’s platform, finding information about the ports secured by 802.1 x protocol is easy, and you can specify verification to tell you which network edge ports, connecting to end stations, are open and which are secured properly. For example, simple verification could do this: - Physical and edge ports with applied security method other than “dot1x” should be colored orange. - Physical ports with applied security method of “dot1x” should be colored green. - All other interfaces we don’t care and should be colored as blue. Setup is actually trivial, with the most complicated part being the selection of what is physical and what is virtual interface. Good news is, that we’ve configured this already for you. The actual outcome of this verification looks like this: 802.1x Interfaces Verification Instead of manually verifying every interface or developing custom script for every platform out there, hundreds of hours of engineering time can be saved using this continuous verification instead. Also, it can be used as an evidence of how the 802.1 x protocol rollout project is proceeding and that the network is properly secured and there are no open interfaces, that would render your network insecure. This will ensure the setup of the Interfaces on all devices in the network. In regards to the other part — RADIUS server configuration — this was covered in one of the recent articles, so you may [check it out](https://blog.ipfabric.io/verifying-aaa-in-enterprise-networks-5364107e5537) to create similar specific rules that will configure IP Fabric to verify your specific AAA needs consistently in a matter of seconds. If you’re interested in learning more about how IP Fabric’s platform can help you with analytics or intended network behavior reporting, contact us through our [website](https://www.ipfabric.io/) , [request a demo](https://ipfabric.io/product/demo-request/) , follow this blog or sign up for [our webinars](https://ipfabric.io/webinars/) . ## Related Resources Security ### [The Hidden Gap Undermining Network Security—and How to Close It](https://ipfabric.io/blog/hidden-gap-network-security-it-operations/) Misaligned network security and IT operations can create critical blind spots. Network assurance is the key to reducing risk. Security ### [How to Handle Cisco’s Latest Critical Vulnerability Without Breaking Your Network](https://ipfabric.io/blog/cisco-critical-vulnerability/) Network digital twins can help address Cisco's latest critical vulnerability and streamline network vulnerability management. Security ### [What’s New at IP Fabric? Unlock Enhanced Visibility For End-to-End Network Security and Compliance](https://ipfabric.io/blog/ip-fabric-7-2-infrastructure-security-and-compliance/) IP Fabric minimizes risks to network security and compliance by incorporating insights from next-gen firewalls, transparent firewalls, IPSec tunnels, and more.