[26196] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Charles Benjamin)
Thu Apr 7 12:29:01 2011
Content-Class: urn:content-classes:message
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_C250A26100766A4CACE3874A3000B3460C17F13237DSAEXMB1housi_"
MIME-Version: 1.0
Message-ID: <C250A26100766A4CACE3874A3000B3460C17F13237@DSAEXMB1.housing.ufl.edu>
Date: Thu, 7 Apr 2011 12:28:19 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Charles Benjamin <Benjamin@HOUSING.UFL.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <012501cbf53a$f35e4160$da1ac420$@edu>
--_000_C250A26100766A4CACE3874A3000B3460C17F13237DSAEXMB1housi_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Christopher,
You might want to evaluate other vendors also.
http://www.reuters.com/article/2011/04/05/cisco-chambers-idUSN0515951520110=
405
Please note that CCSI stands for Certified Cisco Systems Instructor, I hav=
e been working with cisco routers since 1992 and see John Chambers as one o=
f my modern day hero never-the-less in the article it says:
"Chambers called on the company to focus on five areas: routing, switching =
and services; collaboration; data center virtualization; architectures; and=
video."
Security isn't mentioned although may be implied.
All the best,
Charles Benjamin | Senior Network and Systems Administrator CCSI 21905
University of Florida Department of Housing and Residence Education
PO Box 112100 | Gainesville, FL 32611-2100
office 352.392.2171 x10197 | fax 352.392.6819 | Benjamin@housing.ufl.edu<ma=
ilto:Benjamin@housing.ufl.edu>
P Before printing this e-mail think if it is necessary.
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Christoph=
er Hickernell
Sent: Thursday, April 07, 2011 11:46 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Switching from Cisco NAC to Impulse Safe Connect
We have just launched a pilot program with Cisco NAC. We may or may not im=
plement security policies, but the greatest benefit for us will be binding =
individual students to the physical devices. It also gives us a simple, si=
ngle-point of control for policy/copyright violations. Previously, we were=
only able to trace violations down to a MAC address and switch port. But i=
n a suite with four students, we did not know who the device belonged to. =
Now, we just enter the MAC into a filter on the NAC, and the device is bloc=
ked from network access and automatically forwarded to a notification page-=
no matter where on the network they try to connect.
Christopher Hickernell, CCNA, MCSE
Network Support Specialist, ResNet Manager
Clarion University of Pennsylvania
Center for Computing Services
G-13 Still Hall, Clarion, PA 16214
chickernell@clarion.edu<mailto:chickernell@clarion.edu> | 814.393.2218
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Doughty, =
Marc
Sent: Thursday, April 07, 2011 11:21 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Switching from Cisco NAC to Impulse Safe Connect
Greetings,
I wonder if schools with NAC are having significantly less trouble tha=
n those who haven't implemented it. I've seen both, and I honestly couldn't=
say if NAC really improved the overall situation enough to warrant the ove=
rhead it incurred. Anyone see a worthwhile improvement in the overall secur=
ity/malware situation after going from nothing to NAC? Enough to justify th=
e time and cost of implementation?
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way vessel=
."
On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <jhatch@trinity.edu<mailto:jhatc=
h@trinity.edu>> wrote:
We're strongly considering switching from Cisco NAC to Safe Connect
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_C250A26100766A4CACE3874A3000B3460C17F13237DSAEXMB1housi_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:m=3D"http://schemas.m=
icrosoft.com/office/2004/12/omml" xmlns:o=3D"urn:schemas-microsoft-com:offi=
ce:office" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:w=3D"urn:schemas=
-microsoft-com:office:word" xmlns:x=3D"urn:schemas-microsoft-com:office:exc=
el"><head><META content=3D"text/html; charset=3Dus-ascii" http-equiv=3D"Con=
tent-Type">
<STYLE><!-- /* Style Definitions */ p.d96f2e29-2ee1-4e52-85=
a7-d93bf12eebb5, li.d96f2e29-2ee1-4e52-85a7-d93bf12eebb5, div.d96f2e29-2ee1=
-4e52-85a7-d93bf12eebb5, table.d96f2e29-2ee1-4e52-85a7-d93bf12eebb5Table =
{margin:0cm; margin-bottom:.0001pt;} div.Section1 {page=
:Section1;} --></STYLE>
<meta content=3D"text/html; charset=3Dus-ascii" http-equiv=3DContent-Type><=
meta content=3D"Microsoft Word 14 (filtered medium)" name=3DGenerator><styl=
e><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><BODY STYLE=3D"FONT-SIZE: 9pt">
<P><FONT FACE=3D"Calibri,Arial"><div class=3DWordSection1><p class=3DMsoNor=
mal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Chr=
istopher,<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-siz=
e:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p=
class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","s=
ans-serif"'>You might want to evaluate other vendors also.<o:p></o:p></span=
></p><p class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><a href=
=3D"http://www.reuters.com/article/2011/04/05/cisco-chambers-idUSN051595152=
0110405">http://www.reuters.com/article/2011/04/05/cisco-chambers-idUSN0515=
951520110405</a><o:p></o:p></p><p class=3DMsoNormal><span style=3D'font-siz=
e:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p=
></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-famil=
y:"Calibri","sans-serif";color:#1F497D'>Please note that CCSI stands for Ce=
rtified Cisco Systems Instructor, I have been working with cisco rout=
ers since 1992 and see John Chambers as one of my modern day hero never-the=
-less in the article it says:<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F49=
7D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D'font-si=
ze:11.0pt;font-family:"Calibri","sans-serif";color:black'>“Chambers c=
alled on the company to focus on five areas: routing, switching and service=
s; collaboration; data center virtualization; architectures; and video.R=
21;<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0=
pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span>=
</p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calib=
ri","sans-serif";color:black'>Security isn’t mentioned although may b=
e implied.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-si=
ze:11.0pt;font-family:"Calibri","sans-serif";color:black'>All the best,<o:p=
></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font=
-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><=
p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","=
sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal=
><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#=
1F497D'><o:p> </o:p></span></p><div></FONT></P>
<P></P>
<TABLE STYLE=3D"COLOR: #595959; FONT-SIZE: 9pt">
<TBODY>
<TR>
<TD VALIGN=3D"top">
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"><STRONG><FONT COLOR=3D"#0021a5"></FONT></STRON=
G></FONT> </P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"><STRONG><FONT COLOR=3D"#0021a5">Charles Benjam=
in <FONT COLOR=3D"#595959">|</FONT><FONT COLOR=3D"#ff4a00"> Senior Network =
and Systems Administrator CCSI 21905</FONT></FONT></STRONG></FONT><STRONG><=
/STRONG><FONT SIZE=3D"+0"></FONT></P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial">University of Florida Department of Housing an=
d Residence Education</FONT></P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"></FONT></P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial">PO Box 112100 | Gainesville, FL 32611-2100</FO=
NT></P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5" STYLE=3D"FONT-SIZE: 9pt">=
<FONT COLOR=3D"#595959" FACE=3D"Calibri,Arial">office 352.392.2171 x10197 |=
</FONT><FONT FACE=3D"Calibri,Arial">fax 352.392.6819 </FONT><FONT FACE=3D"=
Calibri,Arial">| <a href=3D"mailto:Benjamin@housing.ufl.edu">Benjamin@housi=
ng.ufl.edu</a></FONT><FONT SIZE=3D"+0"></FONT></P></TD></TR>
<TR>
<TD><SPAN LANG=3D"EN-GB" STYLE=3D"FONT-FAMILY: Webdings; COLOR: green; FONT=
-SIZE: 9pt"><FONT COLOR=3D"green" FACE=3D"Calibri,Arial"><SPAN LANG=3D"EN-G=
B" STYLE=3D"FONT-FAMILY: Webdings; COLOR: green; FONT-SIZE: 14pt"><FONT FAC=
E=3D"Palatino Linotype"><FONT FACE=3D"Webdings"><FONT SIZE=3D"2">P </FONT><=
/FONT><FONT COLOR=3D"#595959"> </FONT></FONT></SPAN><FONT FACE=3D"Arial">Be=
fore printing this e-mail think if it is necessary.</FONT></FONT> </SPAN></=
TD></TR>
<TR>
<TD><FONT COLOR=3D"green" FACE=3D"Calibri,Arial"></FONT></TD></TR></TBODY><=
/TABLE>
<P CLASS=3D"d96f2e29-2ee1-4e52-85a7-d93bf12eebb5"> </P><FONT FACE=3D"V=
erdana"><p class=3DMsoNormal><b><span style=3D'font-size:10.0pt;font-family=
:"Tahoma","sans-serif"'>From:</span></b><span style=3D'font-size:10.0pt;fon=
t-family:"Tahoma","sans-serif"'> Resnet Forum [mailto:RESNET-L@LISTSERV.ND.=
EDU] <b>On Behalf Of </b>Christopher Hickernell<br><b>Sent:</b> Thursday, A=
pril 07, 2011 11:46 AM<br><b>To:</b> RESNET-L@LISTSERV.ND.EDU<br><b>Subject=
:</b> Re: Switching from Cisco NAC to Impulse Safe Connect<o:p></o:p></span=
></p></div></div><p class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNo=
rmal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";col=
or:#1F497D'>We have just launched a pilot program with Cisco NAC. We =
may or may not implement security policies, but the greatest benefit for us=
will be binding individual students to the physical devices. It also=
gives us a simple, single-point of control for policy/copyright violations=
. Previously, we were only able to trace violations down to a MAC add=
ress and switch port. But in a suite with four students, we did not know wh=
o the device belonged to. Now, we just enter the MAC into a filter on=
the NAC, and the device is blocked from network access and automatically f=
orwarded to a notification page—no matter where on the network they t=
ry to connect.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'fon=
t-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> =
</o:p></span></p><p class=3DMsoNormal><b><span style=3D'font-size:11.0pt;fo=
nt-family:"Calibri","sans-serif";color:#1F497D'>Christopher</span></b><span=
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D=
'> Hickernell, CCNA, MCSE<o:p></o:p></span></p><p class=3DMsoNormal><i><spa=
n style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497=
D'>Network Support Specialist, ResNet Manager<o:p></o:p></span></i></p><p c=
lass=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","san=
s-serif";color:#1F497D'>Clarion University of Pennsylvania<o:p></o:p></span=
></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Cali=
bri","sans-serif";color:#1F497D'>Center for Computing Services<o:p></o:p></=
span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"=
Calibri","sans-serif";color:#1F497D'>G-13 Still Hall, Clarion, PA 16214<o:p=
></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font=
-family:"Calibri","sans-serif";color:#1F497D'><a href=3D"mailto:chickernell=
@clarion.edu">chickernell@clarion.edu</a> | 814.393.2218<o:p></o:p></span><=
/p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibr=
i","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNo=
rmal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";col=
or:#1F497D'><o:p> </o:p></span></p><div style=3D'border:none;border-to=
p:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><s=
pan style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</spa=
n></b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> R=
esnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Doughty, =
Marc<br><b>Sent:</b> Thursday, April 07, 2011 11:21 AM<br><b>To:</b> RESNET=
-L@LISTSERV.ND.EDU<br><b>Subject:</b> Re: Switching from Cisco NAC to Impul=
se Safe Connect<o:p></o:p></span></p></div><p class=3DMsoNormal><o:p> =
</o:p></p><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'>Greetings,<br=
> I wonder if schools with NAC are having significa=
ntly less trouble than those who haven't implemented it. I've seen both, an=
d I honestly couldn't say if NAC really improved the overall situation enou=
gh to warrant the overhead it incurred. Anyone see a worthwhile improvement=
in the overall security/malware situation after going from nothing to NAC?=
Enough to justify the time and cost of implementation?<br clear=3Dall><br>=
- Marc Doughty<br><br>"If you aren't sure who is the give-way vessel, =
you are the give-way vessel."<o:p></o:p></p><div><p class=3DMsoNormal>=
On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <<a href=3D"mailto:jhatch@tri=
nity.edu">jhatch@trinity.edu</a>> wrote:<o:p></o:p></p><div><p class=3DM=
soNormal>We're strongly considering switching from Cisco NAC to Safe Connec=
t<o:p></o:p></p></div></div><p class=3DMsoNormal>__________________________=
_________________________ You are subscribed to the ResNet-L mailing list. =
<o:p></o:p></p><p>To subscribe, unsubscribe or search the archives, go to <=
a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.ND=
.EDU/archives/resnet-l.html</a> ___________________________________________=
________ <o:p></o:p></p><p class=3DMsoNormal>______________________________=
_____________________ You are subscribed to the ResNet-L mailing list. <o:p=
></o:p></p><p>To subscribe, unsubscribe or search the archives, go to <a hr=
ef=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.ND.EDU=
/archives/resnet-l.html</a> _______________________________________________=
____ <o:p></o:p></p></div></FONT>=20
<P></P>
<P></P></BODY></HTML>=
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_C250A26100766A4CACE3874A3000B3460C17F13237DSAEXMB1housi_--
