[26193] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Cal Frye)
Thu Apr 7 11:43:25 2011
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Message-ID: <4D9DDB85.5010207@calfrye.com>
Date: Thu, 7 Apr 2011 11:43:01 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Cal Frye <cjf@calfrye.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <BANLkTimkCGfh8fKcmr6yMgqcX2e6VLy38w@mail.gmail.com>
On 4/7/11 11:21 AM, Doughty, Marc wrote:
> Greetings,
> I wonder if schools with NAC are having significantly less trouble
> than those who haven't implemented it. I've seen both, and I honestly
> couldn't say if NAC really improved the overall situation enough to
> warrant the overhead it incurred. Anyone see a worthwhile improvement in
> the overall security/malware situation after going from nothing to NAC?
> Enough to justify the time and cost of implementation?
>
some of us are colored by history. "Back in August of Ought-Three," we
melted down under the Blaster/Sasser onslaught and general infectious
state of all those systems going on the network at once. Systems were
just about as infected the following year, but Perfigo (Cisco Clean
Access) identified the infected ones and kept the network functional.
Now, systems generally are cleaner (or at least the infected ones are
better behaved), but NAC is our tool for matching IP addresses with
names, as well as helping folks identify when their system is infected
or misconfigured, and in many cases pointing them to tools needed to
remediate the badness themselves. In many cases, fresh infections are
identified when the malware disables the system's antivirus, and
Safeconnect pops them directly into quarantine.
We think it's still of value.
--
Best regards
-- Cal Frye, Network Administrator, Oberlin College
Mudd Library, x.56930 -- CIT will NEVER ask you for your password!
www.calfrye.com, www.oberlin.edu/cit/
"We are each of us responsible for the evil we might have prevented.
--James Martineau.
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
