[26767] in resnet

home help back first fref pref prev next nref lref last post

Re: CounterACT

daemon@ATHENA.MIT.EDU (Dischiave, David)
Mon Sep 19 13:22:55 2011

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=0015174c3d6c48300704ad4e1d89
Message-ID:  <CAKryk3mUhGgTPu3ncNoCdxhBXATybN6PmY4s_NmYhGNYFAZA7w@mail.gmail.com>
Date:         Mon, 19 Sep 2011 12:48:17 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Dischiave, David" <dischiave@TC.COLUMBIA.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To:  <A9465BFD-104D-4D9C-9E32-D842A1FF70E3@kutztown.edu>

--0015174c3d6c48300704ad4e1d89
Content-Type: text/plain; charset=ISO-8859-1

We use it and like it. It is good for detecting rules that you create then
you can quarantine the behavior by changing VLAN's the port is connected to
on the switch. We needed to upgrade all the Cat OS switches to IOS. There
was an issue with CatOS (the quarantine did not work and it would thrash the
CPU of the switch). Everything is straightened out now. Also, you will need
to tune the rules so you are overly checking for an event. If you work with
support they will help you out.

Thank you,

Dave



On Tue, Apr 5, 2011 at 11:48 AM, Bill Eben <eben@kutztown.edu> wrote:

> Is anyone out there in Resnet-land using CounterACT by ForeScout for their
> NAC? If so, I'd like to hear about your experiences, good or bad.
>
> Thanks,
>
> Bill
> --
> Bill Eben
> Coordinator, Residential Computing
> Kutztown University
> 610.683.4974
> eben@kutztown.edu
>
> ______________________________**_____________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/**archives/resnet-l.html<http://LISTSERV.ND.EDU/archives/resnet-l.html>
> ______________________________**_____________________
>

___________________________________________________
You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--0015174c3d6c48300704ad4e1d89
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

We use it and like it. It is good for detecting rules that you create then =
you can quarantine the=A0behavior=A0by changing VLAN&#39;s the port is conn=
ected to on the switch. We needed to upgrade all the Cat OS switches to IOS=
. There was an issue with CatOS (the=A0quarantine did not work and it would=
 thrash the CPU of the switch). Everything is=A0straightened=A0out now. Als=
o, you will need to tune the rules so you are overly checking for an event.=
 If you work with support they will help you out.=A0<br clear=3D"all">

<div><br></div>Thank you,<div><br><div>Dave</div></div><br>
<br><br><div class=3D"gmail_quote">On Tue, Apr 5, 2011 at 11:48 AM, Bill Eb=
en <span dir=3D"ltr">&lt;<a href=3D"mailto:eben@kutztown.edu">eben@kutztown=
.edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

Is anyone out there in Resnet-land using CounterACT by ForeScout for their =
NAC? If so, I&#39;d like to hear about your experiences, good or bad.<br>
<br>
Thanks,<br>
<br>
Bill<br>
--<br>
Bill Eben<br>
Coordinator, Residential Computing<br>
Kutztown University<br>
<a href=3D"tel:610.683.4974" value=3D"+16106834974" target=3D"_blank">610.6=
83.4974</a><br>
<a href=3D"mailto:eben@kutztown.edu" target=3D"_blank">eben@kutztown.edu</a=
><br>
<br>
______________________________<u></u>_____________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives,<br>
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/<u></u>archives/resnet-l.html</a><br>
______________________________<u></u>_____________________<br>
</blockquote></div><br>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--0015174c3d6c48300704ad4e1d89--

home help back first fref pref prev next nref lref last post