[27826] in resnet
Re: NAC Solutions
daemon@ATHENA.MIT.EDU (Isabelle Graham)
Wed Jul 18 09:44:34 2012
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8; format=flowed
Message-ID: <5006BD5C.8050800@american.edu>
Date: Wed, 18 Jul 2012 09:42:52 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Isabelle Graham <graham@AMERICAN.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <613D816A1CD3254DA7C5990ACF75433E64E674E3@UMMAIL01.gs.umt.edu>
We had been a Cisco Clean Access customer for several years (deployed
campus-wide) and moved to Impulse SafeConnect a year ago. We've been
much happier with their support and find they are an all around better
fit for a higher ed environment.
A few key points off hand:
1. The biggest challenge for us to implement was coordinating with our
network engineering team. Impulse was very good about working with them
directly and facilitating this and it wasn't really a big deal, it was
just the most complicated thing we had to do logistically.
2. We're not using them for 802.1x authentication (currently only on
wireless, Aruba --> Radius --> AD), but are using them for posture
assessment all use segments of wired and wireless. We had to do a bit of
trickery in order to set up support for non-802.1x devices on wireless,
but Impulse was very helpful in getting that set up.
3. We're also not using their guest registration system as we had our
own (home-grown) already in place and working well.
4. Our one outstanding pain point is lack of support for checking third
party/plug-in type products (Java, Flash, Reader). Impulse is interested
in trying to address this but hasn't had much luck working with the
vendors. To be fair, no NAC solution we've found currently does this.
On the whole I think our biggest advantage was already having ubiquitous
NAC and so having a good idea of what we wanted and needed from the new
system. Feel free to ping me directly if you have any questions.
Isabelle Graham
Information Security Engineer
American University
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
