tesorion-immunity.com

What It Is

Tesorion Immunity is Tesorion’s Network Discovery & Access Control (NAC) capability. Its core goal is to control which devices are allowed onto an enterprise network and which network areas they can access once connected. The page emphasizes that the first step in network security is understanding and controlling device admission, combining access control with infection detection and automated isolation to help limit lateral movement inside the internal network.

Core Capabilities and Protection Types

Based on the page content, it mainly covers NAC, network discovery, access-level control, network segmentation, and isolation of infected endpoints. Typical scenarios include access management for office PCs, tablets, phones, printers, cameras, and other IT devices. If a device is accidentally exposed to malware, it can be isolated—directly or automatically—from the rest of the network to prevent spread. For OT environments, the page notes that OT systems are increasingly connected to IT networks or the internet, for example for supplier remote maintenance, making network segmentation important for reducing cybercrime risk. Temporary access by visitors, engineers, suppliers, and similar users is also included, with controls based on the required access level and duration.

Deployment, Integration, and Management

The page does not specify the deployment model—on-premises, cloud, or hybrid—so buyers should clarify the architecture, control points, and high-availability design before purchasing. Integration details are somewhat clearer: Tesorion Immunity communicates with the customer’s network equipment and claims not to depend on specific hardware brands, supporting most common enterprise switches, wireless access points, and wireless LAN controllers. Actual compatibility should be verified against the supported device list. For management and alerting, the text only mentions that it can monitor the network and intervene automatically when needed; it does not disclose details about the console, reporting, APIs, SIEM/SOAR integrations, or notification channels.

Pricing and Compliance

The page does not disclose pricing, licensing metrics, subscription terms, or trial policies, so its value for money can only be assessed conservatively. The site navigation mentions compliance topics such as ISO 27001, DORA, BIO, and NIS2, but it does not clearly state which certifications Tesorion Immunity itself holds or which controls it can directly satisfy.

Pros, Cons, and Best Fit

Its strengths are clear positioning and suitability for organizations that want to treat access control, infection isolation, IT/OT segmentation, and guest access as a unified program. Tesorion also offers MDR, SOC, CERT, incident response, and related services, giving it a relatively complete support capability. The main weakness is that the public information is high-level and lacks details on deployment, pricing, alerting, APIs, and compatibility lists. It is better suited to mid-sized and large organizations with enterprise network infrastructure, or industry customers with OT environments, that need professional services to help implement NAC.

Access from China and Alternatives

The page does not mention access from mainland China, payment methods, or local support, so these remain unknown. If deploying in China, users should test website connectivity, remote support time zones, contract payment options, and data compliance requirements. Comparable alternatives include Cisco ISE, Aruba ClearPass, Forescout, FortiNAC, Portnox, or the open-source PacketFence.