[26184] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Miller, Paul)
Wed Apr 6 16:52:20 2011
X-RC-FROM: <pmiller@dom.edu>
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CBF49C.78F56926"
Message-ID: <E42848805F1F464F9AA02915E9AF64EC0F794041@exchng2k.dom.edu>
Date: Wed, 6 Apr 2011 15:52:02 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Miller, Paul" <pmiller@dom.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <BANLkTi=DOsN3-CBASMr7fVMgT1rCKEJygw@mail.gmail.com>
This is a multi-part message in MIME format.
------_=_NextPart_001_01CBF49C.78F56926
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
We moved from Clean Access to Safe Connect in August 2009. =20
1. The rules are setup very different, and I needed much help from
Impulse getting them setup the way I wanted it (I wanted the same setup
I had with Clean Access). It uses the data from Netflow which we
didn't have, so we had to purchase a Netflow capable router. =20
2. Kind of... My biggest complaint is that they do not write rules
to check for every Windows update/patch like Cisco did; they just check
to see if your automatic updates are set to what you specify (automatic,
off, ..). You'd have to write those yourself. If you are out of
compliance, within seconds a browser will pop open and let you know what
is wrong. The nice thing is that when the server goes down, the traffic
passes as normal unless someone was in quarantine at that time, then
they are stuck. Another nice feature is the detection of a mobile
device.
3. Our support calls have gone down since we've switched, because
the client was much smaller and easier to install. You can set the
authentication to whatever you want; everytime, never, ...
4. I don't like the administration. There's not much you can do
with it, just setup some rules and look at some logs and it's still hard
for me to follow. There were a few things that I needed to call impulse
for because I do not have access to it. This is a Linux server and they
do not want me to have console access to the server, so I can't make
these changes myself.
5. It probably took me a solid three to five days to setup the
rules and kind of understand how they worked.
=20
The first thing that Safe Connect grabs is the IP address; for clean
access it was the MAC address. The only way you can get the MAC address
from Safe Connect is if the client is installed. This is what made
things difficult. But once it was setup, all I had to do is let it run.
If you have anymore questions you can give me a call.
=20
=20
Paul Miller
Network Administrator
Dominican University
708-524-6641
=20
Dominican University Information Technology staff will never ask you for
your username or password via email.
=20
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Joe
Hatch
Sent: Wednesday, April 06, 2011 10:55 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Switching from Cisco NAC to Impulse Safe Connect
=20
We're strongly considering switching from Cisco NAC to Safe Connect and
would welcome comments from those who have experienced the transition.
=20
1. What were the major hurdles (if any)?
2. Does the product work as advertised?
3. Has the end-user experience improved (quicker logins and fewer login
issues)?
4. Is administration easier?
5. How long did it take to complete implementation?
=20
=20
=20
Thanks,
Joseph Hatch
Information Technology Services
Trinity University
(210) 999-7826
___________________________________________________ You are subscribed
to the ResNet-L mailing list.=20
To subscribe, unsubscribe or search the archives, go to
http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________=20
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
------_=_NextPart_001_01CBF49C.78F56926
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" =
xmlns:p=3D"urn:schemas-microsoft-com:office:powerpoint" =
xmlns:a=3D"urn:schemas-microsoft-com:office:access" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns:s=3D"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" =
xmlns:rs=3D"urn:schemas-microsoft-com:rowset" xmlns:z=3D"#RowsetSchema" =
xmlns:b=3D"urn:schemas-microsoft-com:office:publisher" =
xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadsheet" =
xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" =
xmlns:odc=3D"urn:schemas-microsoft-com:office:odc" =
xmlns:oa=3D"urn:schemas-microsoft-com:office:activation" =
xmlns:html=3D"http://www.w3.org/TR/REC-html40" =
xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/" =
xmlns:rtc=3D"http://microsoft.com/officenet/conferencing" =
xmlns:D=3D"DAV:" xmlns:Repl=3D"http://schemas.microsoft.com/repl/" =
xmlns:mt=3D"http://schemas.microsoft.com/sharepoint/soap/meetings/" =
xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2003/xml" =
xmlns:ppda=3D"http://www.passport.com/NameSpace.xsd" =
xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" =
xmlns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" =
xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#" =
xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint/dsp" =
xmlns:udc=3D"http://schemas.microsoft.com/data/udc" =
xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" =
xmlns:sub=3D"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/"=
xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#" =
xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/" =
xmlns:sps=3D"http://schemas.microsoft.com/sharepoint/soap/" =
xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance" =
xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/soap" =
xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile" =
xmlns:udcp2p=3D"http://schemas.microsoft.com/data/udc/parttopart" =
xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" =
xmlns:dsss=3D"http://schemas.microsoft.com/office/2006/digsig-setup" =
xmlns:dssi=3D"http://schemas.microsoft.com/office/2006/digsig" =
xmlns:mdssi=3D"http://schemas.openxmlformats.org/package/2006/digital-sig=
nature" =
xmlns:mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006=
" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns:mrels=3D"http://schemas.openxmlformats.org/package/2006/relationshi=
ps" xmlns:spwp=3D"http://microsoft.com/sharepoint/webpartpages" =
xmlns:ex12t=3D"http://schemas.microsoft.com/exchange/services/2006/types"=
=
xmlns:ex12m=3D"http://schemas.microsoft.com/exchange/services/2006/messag=
es" =
xmlns:pptsl=3D"http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/=
" =
xmlns:spsl=3D"http://microsoft.com/webservices/SharePointPortalServer/Pub=
lishedLinksService" xmlns:Z=3D"urn:schemas-microsoft-com:" =
xmlns:st=3D"" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:918756147;
mso-list-type:hybrid;
mso-list-template-ids:1103233900 67698703 67698713 67698715 67698703 =
67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:2110808196;
mso-list-type:hybrid;
mso-list-template-ids:-594392442 67698703 67698713 67698715 67698703 =
67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>We moved from Clean Access to Safe Connect in August 2009. =
<o:p></o:p></span></p><p class=3DMsoListParagraph =
style=3D'text-indent:-.25in;mso-list:l0 level1 lfo2'><![if =
!supportLists]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><span style=3D'mso-list:Ignore'>1.<span style=3D'font:7.0pt "Times =
New Roman"'> =
</span></span></span><![endif]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>The rules are setup very different, and I needed much help from =
Impulse getting them setup the way I wanted it (I wanted the same setup =
I had with Clean Access). It uses the data from Netflow =
which we didn’t have, so we had to purchase a Netflow capable =
router. <o:p></o:p></span></p><p class=3DMsoListParagraph =
style=3D'text-indent:-.25in;mso-list:l0 level1 lfo2'><![if =
!supportLists]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><span style=3D'mso-list:Ignore'>2.<span style=3D'font:7.0pt "Times =
New Roman"'> =
</span></span></span><![endif]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Kind of… My biggest complaint is that they do not write rules =
to check for every Windows update/patch like Cisco did; they just check =
to see if your automatic updates are set to what you specify (automatic, =
off, ..). You’d have to write those yourself. If you =
are out of compliance, within seconds a browser will pop open and let =
you know what is wrong. The nice thing is that when the server =
goes down, the traffic passes as normal unless someone was in quarantine =
at that time, then they are stuck. Another nice feature is the =
detection of a mobile device.<o:p></o:p></span></p><p =
class=3DMsoListParagraph style=3D'text-indent:-.25in;mso-list:l0 level1 =
lfo2'><![if !supportLists]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><span style=3D'mso-list:Ignore'>3.<span style=3D'font:7.0pt "Times =
New Roman"'> =
</span></span></span><![endif]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Our support calls have gone down since we’ve switched, because =
the client was much smaller and easier to install. You can =
set the authentication to whatever you want; everytime, never, =
...<o:p></o:p></span></p><p class=3DMsoListParagraph =
style=3D'text-indent:-.25in;mso-list:l0 level1 lfo2'><![if =
!supportLists]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><span style=3D'mso-list:Ignore'>4.<span style=3D'font:7.0pt "Times =
New Roman"'> =
</span></span></span><![endif]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>I don’t like the administration. There’s not much =
you can do with it, just setup some rules and look at some logs and =
it’s still hard for me to follow. There were a few things =
that I needed to call impulse for because I do not have access to =
it. This is a Linux server and they do not want me to have console =
access to the server, so I can’t make these changes =
myself.<o:p></o:p></span></p><p class=3DMsoListParagraph =
style=3D'text-indent:-.25in;mso-list:l0 level1 lfo2'><![if =
!supportLists]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><span style=3D'mso-list:Ignore'>5.<span style=3D'font:7.0pt "Times =
New Roman"'> =
</span></span></span><![endif]><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>It probably took me a solid three to five days to setup the rules and =
kind of understand how they worked.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p> </o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>The first thing that Safe Connect grabs is the IP address; for clean =
access it was the MAC address. The only way you can get the MAC =
address from Safe Connect is if the client is installed. This is =
what made things difficult. But once it was setup, all I had to do =
is let it run. If you have anymore questions you can give me a =
call.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p> </o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p> </o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:#1F497D'>Paul =
Miller<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:#1F497D'>Network =
Administrator<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:#1F497D'>Dominican =
University<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:#1F497D'>708-524-6641<o:p></o:p></span></=
p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:#1F497D'><o:p> </o:p></span></p><p =
class=3DMsoNormal><i><span =
style=3D'font-size:10.0pt;color:red'>Dominican University Information =
Technology staff will </span></i><b><i><u><span =
style=3D'font-size:11.0pt;color:red'>never</span></u></i></b><i><span =
style=3D'font-size:10.0pt;color:red'> ask you for your username or =
password via email.</span></i><span =
style=3D'font-size:10.0pt;color:#1F497D'><o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p> </o:p></span></p><div =
style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in'><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span>=
</b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> =
Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Joe =
Hatch<br><b>Sent:</b> Wednesday, April 06, 2011 10:55 AM<br><b>To:</b> =
RESNET-L@LISTSERV.ND.EDU<br><b>Subject:</b> Switching from Cisco NAC to =
Impulse Safe Connect<o:p></o:p></span></p></div><p =
class=3DMsoNormal><o:p> </o:p></p><div><p class=3DMsoNormal>We're =
strongly considering switching from Cisco NAC to Safe Connect and would =
welcome comments from those who have experienced the =
transition.<o:p></o:p></p></div><div><p =
class=3DMsoNormal> <o:p></o:p></p></div><div><p =
class=3DMsoNormal>1. What were the major hurdles (if =
any)?<o:p></o:p></p></div><div><p class=3DMsoNormal>2. Does the product =
work as advertised?<o:p></o:p></p></div><div><p class=3DMsoNormal>3. Has =
the end-user experience improved (quicker logins and fewer login =
issues)?<o:p></o:p></p></div><div><p class=3DMsoNormal>4. Is =
administration easier?<o:p></o:p></p></div><div><p class=3DMsoNormal>5. =
How long did it take to complete =
implementation?<o:p></o:p></p></div><div><p =
class=3DMsoNormal> <o:p></o:p></p></div><div><p =
class=3DMsoNormal> <o:p></o:p></p></div><div><p =
class=3DMsoNormal> <o:p></o:p></p></div><div><p =
class=3DMsoNormal>Thanks,<o:p></o:p></p></div><div><p class=3DMsoNormal =
style=3D'margin-bottom:12.0pt'><br clear=3Dall>Joseph =
Hatch<br>Information Technology Services<br>Trinity University<br>(210) =
999-7826<br><br><br><o:p></o:p></p></div><p =
class=3DMsoNormal>___________________________________________________ =
You are subscribed to the ResNet-L mailing list. <o:p></o:p></p><p>To =
subscribe, unsubscribe or search the archives, go to =
http://LISTSERV.ND.EDU/archives/resnet-l.html =
___________________________________________________ =
<o:p></o:p></p></div></body></html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
------_=_NextPart_001_01CBF49C.78F56926--
