Veri-NAC 5220

One-box vulnerability management and network access control (NAC).

Sized for small networks.

Control who can connect to your network. Unknown laptops and unauthorized wireless access points are no longer a problem.

Supports up to 25 network assets.

Operates as a standalone NAC appliance or as a managed remote unit to larger Veri-NAC models.

Protects your network from vulnerabilities firewalls can’t defend against.

Agentless and non-inline design provides rock-solid security in an easy-to-deploy appliance.

No infrastructure upgrade needed—works with existing switches.

Provides blackholing and VLAN quarantining of untrusted assets.

Detects malware on infected devices.

Compact chassis is wallmountable—no rack required.

Easy, plug-and-play setup.

Generates compliance reports for GLBA, HIPAA, Visa PCI, and more.

Part of the Veri-NAC family
Veri-NAC™ 5220 is part of the Veri-NAC family of one-box NAC solutions and provides state-of-the-art network access control for networks of up to 25 nodes. The Veri-NAC family consists of NAC solutions ranging from the Veri-NAC 5220 for very small networks to the Veri-NAC 5800 for large enterprise networks with up to 100,000 nodes.

Don’t be the next security breach headline!
You have a firewall to stop hackers, viruses, and malware at the network’s edge. A firewall is vital to safe network operation, but because it operates at the edge of your LAN, it can only protect you from threats coming from outside your network.

NAC devices, on the other hand, protect your network from threats originating on the inside. Unauthorized devices connected to your network are major threats to any organization. This is what a NAC appliance is designed to prevent, whether the vulnerability is a LAN port in a lobby or conference room, or a wireless access point.

Veri-NAC is a family of Network Access Control (NAC) appliances from Black Box that ensures that only authorized devices and users gain access to your network. It also screens for vulnerabilities in computers connected to your network, returning mobile users, wireless devices, and new devices. If Veri-NAC detects an untrusted asset, it responds instantly by shutting off network access for that device—protecting your network while keeping your trusted devices securely on-line.


Designed for simplicity
NAC solutions have been around for a while but have been slow to catch on because they’ve been expensive, time-consuming, and often require extensive equipment upgrades. In short, they were just too complicated to be worthwhile for most organizations.

Veri-NAC, on the other hand, is designed to provide maximum security in a simple, agentless design that’s also very affordable. There’s no need for extensive training or dedicated personnel, no need to install software agents, and no need to upgrade switches—Veri-NAC is easy to integrate into your network.

Only the trusted
Veri-NAC only lets computers and devices onto your network if they comply with standards that you specify.

All network devices have a unique, factory-installed MAC address. Veri-NAC assembles a profile of each device, including the user login, MAC address, as well as other information, and only lets known, trusted devices on the network. It can even detect and stop a machine trying to get in under a spoofed MAC address. If Veri-NAC detects an untrusted asset, it will automatically send administration an alert to investigate and correct the problem.

All Veri-NAC models include an endpoint vulnerability auditing engine featuring the common vulnerability and exposures (CVE) database, which checks to make sure each connected device complies with your standards, including up-to-date operating system patches. This auditing function works for all connected devices, not just PCs.

Protects continuously
Veri-NAC continuously scans your network, looking for unauthorized devices attempting to obtain an IP address. In addition, you can schedule Veri-NAC to scan attached devices to search for security vulnerabilities.

No agents
Unlike many other NAC systems, Veri-NAC doesn’t require that you install software agents on connected machines. This both simplifies installation and improves security because agents are vulnerable to hacking. Agentless design means that Veri-NAC also works with devices such as printers, smartphones, and wireless access points that can’t have agents installed on them.

Cost effective
Not only is the up-front cost for Veri-NAC often lower than other solutions, installation and ongoing maintenance are lower, too. Veri-NAC works with your existing network and legacy infrastructure, so there's no need for expensive upgrades. Plus, Veri-NAC requres no formal training and minimal installation time, so even organizations with a limited IT staff can easily add it to their network security plan without straining resources.

Recordkeeping and reporting
Veri-NAC helps you comply with requirements for GLBA, HIPAA, PCI, and other security and privacy standards. Model 5220 has storage for up to 150 GB of activity logs to automate compliance reporting.

Veri-NAC displays network vulnerability information in colorful, easy-to-interpret graphs and charts. With one glance, you can view the status of your network and of each node within your network. Veri-NAC tracks and logs common vulnerabilities and exposures (CVEs), documenting end-user policies for regulatory compliance initiatives. Veri-NAC makes compliance audits easier by enabling you to provide complete records.

Sized for small networks.
Veri-NAC model 5220 offers solid Veri-NAC network access control for small networks with up to 25 network devices. It’s ideal for use in small offices, either as a freestanding NAC appliance or as a remote unit that can be centrally managed by our Veri-NAC enterprise models: 5400/5600/5800.