[26194] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Christopher Hickernell)
Thu Apr 7 11:47:00 2011
MIME-version: 1.0
Content-type: multipart/alternative; boundary="Boundary_(ID_0+cLCgXnWKaBxaXgPUggFg)"
Content-language: en-us
Message-ID: <012501cbf53a$f35e4160$da1ac420$@edu>
Date: Thu, 7 Apr 2011 11:46:24 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Christopher Hickernell <chickernell@clarion.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <BANLkTimkCGfh8fKcmr6yMgqcX2e6VLy38w@mail.gmail.com>
This is a multi-part message in MIME format.
--Boundary_(ID_0+cLCgXnWKaBxaXgPUggFg)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
We have just launched a pilot program with Cisco NAC. We may or may not
implement security policies, but the greatest benefit for us will be binding
individual students to the physical devices. It also gives us a simple,
single-point of control for policy/copyright violations. Previously, we
were only able to trace violations down to a MAC address and switch port.
But in a suite with four students, we did not know who the device belonged
to. Now, we just enter the MAC into a filter on the NAC, and the device is
blocked from network access and automatically forwarded to a notification
page-no matter where on the network they try to connect.
Christopher Hickernell, CCNA, MCSE
Network Support Specialist, ResNet Manager
Clarion University of Pennsylvania
Center for Computing Services
G-13 Still Hall, Clarion, PA 16214
chickernell@clarion.edu | 814.393.2218
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Doughty,
Marc
Sent: Thursday, April 07, 2011 11:21 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Switching from Cisco NAC to Impulse Safe Connect
Greetings,
I wonder if schools with NAC are having significantly less trouble than
those who haven't implemented it. I've seen both, and I honestly couldn't
say if NAC really improved the overall situation enough to warrant the
overhead it incurred. Anyone see a worthwhile improvement in the overall
security/malware situation after going from nothing to NAC? Enough to
justify the time and cost of implementation?
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way
vessel."
On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <jhatch@trinity.edu> wrote:
We're strongly considering switching from Cisco NAC to Safe Connect
___________________________________________________ You are subscribed to
the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to
http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--Boundary_(ID_0+cLCgXnWKaBxaXgPUggFg)
Content-type: text/html; charset=us-ascii
Content-transfer-encoding: 7BIT
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>We have just launched a pilot program with Cisco NAC. We
may or may not implement security policies, but the greatest benefit for us
will be binding individual students to the physical devices. It also
gives us a simple, single-point of control for policy/copyright violations.
Previously, we were only able to trace violations down to a MAC address and switch
port. But in a suite with four students, we did not know who the device
belonged to. Now, we just enter the MAC into a filter on the NAC, and the
device is blocked from network access and automatically forwarded to a
notification page—no matter where on the network they try to connect.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Christopher</span></b><span style='font-size:11.0pt;font-family:
"Calibri","sans-serif";color:#1F497D'> Hickernell, CCNA, MCSE<o:p></o:p></span></p>
<p class=MsoNormal><i><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Network Support Specialist, ResNet Manager<o:p></o:p></span></i></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Clarion University of Pennsylvania<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Center for Computing Services<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>G-13 Still Hall, Clarion, PA 16214<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>chickernell@clarion.edu | 814.393.2218<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Resnet Forum
[mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Doughty, Marc<br>
<b>Sent:</b> Thursday, April 07, 2011 11:21 AM<br>
<b>To:</b> RESNET-L@LISTSERV.ND.EDU<br>
<b>Subject:</b> Re: Switching from Cisco NAC to Impulse Safe Connect<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'>Greetings,<br>
I wonder if schools with NAC are having significantly
less trouble than those who haven't implemented it. I've seen both, and I
honestly couldn't say if NAC really improved the overall situation enough to
warrant the overhead it incurred. Anyone see a worthwhile improvement in the
overall security/malware situation after going from nothing to NAC? Enough to
justify the time and cost of implementation?<br clear=all>
<br>
- Marc Doughty<br>
<br>
"If you aren't sure who is the give-way vessel, you are the give-way vessel."<br>
<br>
<o:p></o:p></p>
<div>
<p class=MsoNormal>On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <<a
href="mailto:jhatch@trinity.edu">jhatch@trinity.edu</a>> wrote:<o:p></o:p></p>
<div>
<p class=MsoNormal>We're strongly considering switching from Cisco NAC to Safe
Connect<o:p></o:p></p>
</div>
</div>
<p class=MsoNormal>___________________________________________________ You are
subscribed to the ResNet-L mailing list. <o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to
http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________ <o:p></o:p></p>
</div>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--Boundary_(ID_0+cLCgXnWKaBxaXgPUggFg)--
