[26189] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Hague, Jeff)
Thu Apr 7 10:06:17 2011
X-Barracuda-Envelope-From: jhague@rmc.edu
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_AF612D2DEF87F344825D44DFDAD29AAF01AB7B14RMCEmailBrmcedu_"
MIME-Version: 1.0
Message-ID: <AF612D2DEF87F344825D44DFDAD29AAF01AB7B14@RMCEmailB.rmc.edu>
Date: Thu, 7 Apr 2011 10:05:48 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Hague, Jeff" <jhague@rmc.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <BANLkTi=DOsN3-CBASMr7fVMgT1rCKEJygw@mail.gmail.com>
--_000_AF612D2DEF87F344825D44DFDAD29AAF01AB7B14RMCEmailBrmcedu_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
We did this 2 years ago and have been pleased.
1 There weren't any major hurdles, the Safeconnect system goes in pretty ea=
sily (if your gear supports netflow) and their Tech support handles most of=
it.
2 It does work as advertised.
3 The user experience improved a lot.
4 Administration is easier.
5 We implemented it over the course of about 6 weeks (summer break) but cou=
ld have done it much quicker if needed.
We made the switch because Cisco's solution had become far too complicated =
for what we needed and had far too many implementation issues. In particula=
r we had all kinds of issues with the Cisco client installations and upgrad=
es, recognition of installed service packs and patches and detection of ant=
ivirus products and updated definitions. Our feeling was that if we were co=
rporate and had very strict security needs, Cisco's solution would be bette=
r and the cost of administration could be justified but we just don't need =
that level of security. For a residential network, I'm fine knowing that Wi=
ndows update is turned on and it downloads and installs patches as needed -=
I really don't care that they have specific patches at specific times. Saf=
econnect does not support as many av packages as Cisco but it supports the =
main consumer grade products and it plays nicely with them. I think too tha=
t there was better reporting capabilities with Cisco but I don't need that =
either - Safeconnect tells me what I need to know. I spend far less time de=
aling with Safeconnect than I did with Cisco. With Cisco, I rarely went a d=
ay without having to do something and I know our End User Services folks ha=
d to deal with client issues daily. With Safeconnect I rarely have to do an=
ything except block a user for an RIAA violation here and there and turn it=
on or off periodically if we have something special happening on campus. T=
he only thing I miss about the Cisco solution was that I could go in and ki=
ck individual users or all users off and force them to re authenticate. The=
re isn't a big need for that but it is not possible with Safeconnect as far=
as I can tell.
Jeff
Jeff Hague
Network Manager & TSO
Adjunct Faculty
Randolph-Macon College
(804) 752-3710
jhague@rmc.edu<mailto:jhague@rmc.edu>
www.rmc.edu
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Joe Hatch
Sent: Wednesday, April 06, 2011 11:55 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: [RESNET-L] Switching from Cisco NAC to Impulse Safe Connect
We're strongly considering switching from Cisco NAC to Safe Connect and wou=
ld welcome comments from those who have experienced the transition.
1. What were the major hurdles (if any)?
2. Does the product work as advertised?
3. Has the end-user experience improved (quicker logins and fewer login iss=
ues)?
4. Is administration easier?
5. How long did it take to complete implementation?
Thanks,
Joseph Hatch
Information Technology Services
Trinity University
(210) 999-7826
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_AF612D2DEF87F344825D44DFDAD29AAF01AB7B14RMCEmailBrmcedu_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Berlin Sans FB";
panose-1:2 14 6 2 2 5 2 2 3 6;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span style=3D'f=
ont-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We did th=
is 2 years ago and have been pleased.<o:p></o:p></span></p><p class=3DMsoNo=
rmal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";col=
or:#1F497D'>1 There weren’t any major hurdles, the Safeconnect system=
goes in pretty easily (if your gear supports netflow) and their Tech suppo=
rt handles most of it.<o:p></o:p></span></p><p class=3DMsoNormal><span styl=
e=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>2 I=
t does work as advertised.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'=
>3 The user experience improved a lot.<o:p></o:p></span></p><p class=3DMsoN=
ormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";co=
lor:#1F497D'>4 Administration is easier.<o:p></o:p></span></p><p class=3DMs=
oNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";=
color:#1F497D'>5 We implemented it over the course of about 6 weeks (summer=
break) but could have done it much quicker if needed.<o:p></o:p></span></p=
><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri"=
,"sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNorm=
al><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color=
:#1F497D'>We made the switch because Cisco’s solution had become far =
too complicated for what we needed and had far too many implementation issu=
es. In particular we had all kinds of issues with the Cisco client installa=
tions and upgrades, recognition of installed service packs and patches and =
detection of antivirus products and updated definitions. Our feeling was th=
at if we were corporate and had very strict security needs, Cisco’s s=
olution would be better and the cost of administration could be justified b=
ut we just don’t need that level of security. For a residential netwo=
rk, I’m fine knowing that Windows update is turned on and it download=
s and installs patches as needed – I really don’t care that the=
y have specific patches at specific times. Safeconnect does not support as =
many av packages as Cisco but it supports the main consumer grade products =
and it plays nicely with them. I think too that there was better reporting =
capabilities with Cisco but I don’t need that either – Safeconn=
ect tells me what I need to know. I spend far less time dealing with Safeco=
nnect than I did with Cisco. With Cisco, I rarely went a day without having=
to do something and I know our End User Services folks had to deal with cl=
ient issues daily. With Safeconnect I rarely have to do anything except blo=
ck a user for an RIAA violation here and there and turn it on or off period=
ically if we have something special happening on campus. The only thing I m=
iss about the Cisco solution was that I could go in and kick individual use=
rs or all users off and force them to re authenticate. There isn’t a =
big need for that but it is not possible with Safeconnect as far as I can t=
ell.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.=
0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></sp=
an></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1F497D'>Jeff <o:p></o:p></span></p><p class=3DMs=
oNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";=
color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=
=3D'font-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#21586=
8'>Jeff Hague<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font=
-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#215868'>Netwo=
rk Manager & TSO<o:p></o:p></span></p><p class=3DMsoNormal><span style=
=3D'font-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#21586=
8'>Adjunct Faculty<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D=
'font-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#215868'>=
Randolph-Macon College<o:p></o:p></span></p><p class=3DMsoNormal><span styl=
e=3D'font-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#2158=
68'>(804) 752-3710<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D=
'font-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#215868'>=
<a href=3D"mailto:jhague@rmc.edu"><span style=3D'color:#215868'>jhague@rmc.=
edu</span></a><o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'fon=
t-size:11.0pt;font-family:"Berlin Sans FB","sans-serif";color:#215868'>www.=
rmc.edu</span><span style=3D'font-size:11.0pt;font-family:"Berlin Sans FB",=
"sans-serif";color:#215868'><o:p></o:p></span></p><p class=3DMsoNormal><spa=
n style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'><o:p> </o:p></span></p><div style=3D'border:none;border-top:solid #=
B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><span style=
=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><sp=
an style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Resnet For=
um [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Joe Hatch<br><b>Se=
nt:</b> Wednesday, April 06, 2011 11:55 AM<br><b>To:</b> RESNET-L@LISTSERV.=
ND.EDU<br><b>Subject:</b> [RESNET-L] Switching from Cisco NAC to Impulse Sa=
fe Connect<o:p></o:p></span></p></div><p class=3DMsoNormal><o:p> </o:p=
></p><div><p class=3DMsoNormal>We're strongly considering switching from Ci=
sco NAC to Safe Connect and would welcome comments from those who have expe=
rienced the transition.<o:p></o:p></p></div><div><p class=3DMsoNormal> =
;<o:p></o:p></p></div><div><p class=3DMsoNormal>1. What were the major hurd=
les (if any)?<o:p></o:p></p></div><div><p class=3DMsoNormal>2. Does the pro=
duct work as advertised?<o:p></o:p></p></div><div><p class=3DMsoNormal>3. H=
as the end-user experience improved (quicker logins and fewer login issues)=
?<o:p></o:p></p></div><div><p class=3DMsoNormal>4. Is administration easier=
?<o:p></o:p></p></div><div><p class=3DMsoNormal>5. How long did it take&nbs=
p;to complete implementation?<o:p></o:p></p></div><div><p class=3DMsoNormal=
> <o:p></o:p></p></div><div><p class=3DMsoNormal> <o:p></o:p></p>=
</div><div><p class=3DMsoNormal> <o:p></o:p></p></div><div><p class=3D=
MsoNormal>Thanks,<o:p></o:p></p></div><div><p class=3DMsoNormal style=3D'ma=
rgin-bottom:12.0pt'><br clear=3Dall>Joseph Hatch<br>Information Technology =
Services<br>Trinity University<br>(210) 999-7826<br><br><br><o:p></o:p></p>=
</div><p class=3DMsoNormal>________________________________________________=
___ You are subscribed to the ResNet-L mailing list. <o:p></o:p></p><p>To s=
ubscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.EDU/=
archives/resnet-l.html ___________________________________________________ =
<o:p></o:p></p></div></body></html>=
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_AF612D2DEF87F344825D44DFDAD29AAF01AB7B14RMCEmailBrmcedu_--
