Damron, from Accuvant, fingered network access control (NAC) as overrated for the same reason as IAM: "It takes years to get it working correctly," he repeated.
Sharing that view is Tom Giangreco, information security officer at SchoolsFirst Federal Credit Union, formally Orange County Teachers Federal Credit Union.
"I would agree with the NAC appraisal. It's taken us more than three years to get it working according to our requirements and not those of a university campus, which they seem to have been designed for," he said.
Read more about application security in CSOonline's Application Security section.