[26989] in resnet
Re: Do we still need Network Access Control?
daemon@ATHENA.MIT.EDU (Nathan Hay)
Fri Nov 4 13:58:03 2011
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Message-ID: <4EB3EE9F02000084000F967B@poplar.cedarville.edu>
Date: Fri, 4 Nov 2011 13:54:39 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Nathan Hay <nphay@cedarville.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <755A73D3547BAE429728E2EC2AEDC605E39A36FBA3@EXMAIL.csuchico.edu>
We ditched NAC a few years ago after having it for 3 years. It created more problems than it fixed.
We do malware/AV scanning at our firewall and don't let student laptops talk to each other on wireless. We've haven't had many problems.
Nathan
Nathan P. Hay
Network Engineer | Information Technology
Cedarville University | www.cedarville.edu
937-766-7905
twitter: @nathanphay
>>> "Richter, Ryan" <rrichter@csuchico.edu> 11/4/2011 1:24 PM >>>
Hi folks,
In the wake of 2003 with Blaster and other worms spreading through unpatched systems like wildfire we made the decision to purchase a Network Access Control product (Cisco's Clean Access). In the following years, with OS patch and antivirus enforcement, malware was definitely less of a problem. CCA did its job.
But these days, with operating systems automatically downloading and installing patches by default, Windows firewall on by default, do you think a Network Access Control solution is still necessary? The cost and support of these solutions is not trivial.
Malware continues to be a relatively small issue in our residence halls, but I'm no longer sure it's because of our NAC policies, or because of better operating systems.
Has anyone ditched their NAC solution and tested these waters?
If you don't have NAC in your residence halls, what's it like? Is malware a big problem?
Thanks and happy Friday,
-Ryan
Ryan Richter
IT Support Services
California State University, Chico
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
