[26984] in resnet
Do we still need Network Access Control?
daemon@ATHENA.MIT.EDU (Richter, Ryan)
Fri Nov 4 13:27:33 2011
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_755A73D3547BAE429728E2EC2AEDC605E39A36FBA3EXMAILcsuchic_"
MIME-Version: 1.0
Message-ID: <755A73D3547BAE429728E2EC2AEDC605E39A36FBA3@EXMAIL.csuchico.edu>
Date: Fri, 4 Nov 2011 10:24:49 -0700
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Richter, Ryan" <rrichter@CSUCHICO.EDU>
To: RESNET-L@listserv.nd.edu
--_000_755A73D3547BAE429728E2EC2AEDC605E39A36FBA3EXMAILcsuchic_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi folks,
In the wake of 2003 with Blaster and other worms spreading through unpatche=
d systems like wildfire we made the decision to purchase a Network Access C=
ontrol product (Cisco's Clean Access). In the following years, with OS patc=
h and antivirus enforcement, malware was definitely less of a problem. CCA =
did its job.
But these days, with operating systems automatically downloading and instal=
ling patches by default, Windows firewall on by default, do you think a Net=
work Access Control solution is still necessary? The cost and support of th=
ese solutions is not trivial.
Malware continues to be a relatively small issue in our residence halls, bu=
t I'm no longer sure it's because of our NAC policies, or because of better=
operating systems.
Has anyone ditched their NAC solution and tested these waters?
If you don't have NAC in your residence halls, what's it like? Is malware a=
big problem?
Thanks and happy Friday,
-Ryan
Ryan Richter
IT Support Services
California State University, Chico
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_755A73D3547BAE429728E2EC2AEDC605E39A36FBA3EXMAILcsuchic_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>Hi folks,<o:p></=
o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>In t=
he wake of 2003 with Blaster and other worms spreading through unpatched sy=
stems like wildfire we made the decision to purchase a Network Access Contr=
ol product (Cisco’s Clean Access). In the following years, with OS pa=
tch and antivirus enforcement, malware was definitely less of a problem. CC=
A did its job.<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p c=
lass=3DMsoNormal>But these days, with operating systems automatically downl=
oading and installing patches by default, Windows firewall on by default, d=
o you think a Network Access Control solution is still necessary? The cost =
and support of these solutions is not trivial.<o:p></o:p></p><p class=3DMso=
Normal><o:p> </o:p></p><p class=3DMsoNormal>Malware continues to be a =
relatively small issue in our residence halls, but I’m no longer sure=
it’s because of our NAC policies, or because of better operating sys=
tems.<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p class=3DMs=
oNormal>Has anyone ditched their NAC solution and tested these waters?<o:p>=
</o:p></p><p class=3DMsoNormal>If you don’t have NAC in your residenc=
e halls, what’s it like? Is malware a big problem?<o:p></o:p></p><p c=
lass=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Thanks and happy=
Friday,<o:p></o:p></p><p class=3DMsoNormal>-Ryan<o:p></o:p></p><p class=3D=
MsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span style=3D'color:gr=
ay'>Ryan Richter<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'c=
olor:gray'>IT Support Services<o:p></o:p></span></p><p class=3DMsoNormal><s=
pan style=3D'color:gray'>California State University, Chico<o:p></o:p></spa=
n></p></div></body></html>=
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_755A73D3547BAE429728E2EC2AEDC605E39A36FBA3EXMAILcsuchic_--
