In another approach, Gatekeeper 125 controls access to secure customer data using Network Access Control (NAC). NAC uses the configuration of access points, such as firewalls, switches or routers to control access to resources within a protected network. Typically, access to resources including secured customer data is only granted (from CRM Systems 120) after authentication of a member of Access Devices 110 or of a customer. The granted access may be temporary and may be granted only to a particular customer service agent interface, e.g., access may be granted or denied on the granularity of a particular device hosting a customer service agent interface. This (NAC) approach provides a level of security on a network level, in which access to particular resources on a protected network is controlled. This approach is optionally used in conjunction with other access control methods disclosed herein. For example, NAC may be used to control access to a particular resource including secure customer data and query filtering used to control access to particular data records within a database.
In some embodiments, Gatekeeper 125 is configured to facilitate both automatic and manual authentication. For example, Gatekeeper 125 may first automatically authenticate Access Device 110A and then provide questions to manually authenticate a customer using Access Device 110A.