[27834] in resnet
Re: NAC Solutions
daemon@ATHENA.MIT.EDU (Hall, Rand)
Thu Jul 19 12:47:09 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=14dae9d7171a38063004c5311664
Message-ID: <CANajV=Na1gAwq2-3sXTngXRNK22M19EzWCN_J0jcj6p-X_JyZA@mail.gmail.com>
Date: Thu, 19 Jul 2012 12:15:03 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Hall, Rand" <hallr@MERRIMACK.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <7F8CAE21F9C1C94A90F11320EF3974CE4E168D47@LUEMSMAIL01.University.liberty.edu>
--14dae9d7171a38063004c5311664
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
> Depending on your requirements, Impulse Point may be a good solution.
Since they do
> not currently have a good system for self-registering non-802.1X devices
I'm pretty sure that the version they are currently rolling out can do this
with what appears to be a brand new user self-service portal.
On Thu, Jul 19, 2012 at 8:12 AM, Osborne, Bruce W <bosborne@liberty.edu>wro=
te:
> Chuck,****
>
> ** **
>
> From your web site, I notice that you have about 30k students. Depending
> on your requirements, Impulse Point may be a good solution. Since they do
> not currently have a good system for self-registering non-802.1X devices,
> we needed to look elsewhere to Aruba ClearPass.****
>
> ** **
>
> Liberty University is also a Cisco shop, except for wireless. In our
> experience, the Bradford solution did not scale well and was difficult to
> manage once you need more than one set of servers (=93pod=94). In our
> experience with primarily wireless users on open SSIDs with the persisten=
t
> agent, we found server performance began to suffer around 5000 to 6000
> concurrent users per server. Bradford has refreshed their hardware
> offerings, so performance may be improved slightly. Their management serv=
er
> solution will allow the pods to share registration information, but not
> client posture status, A user may pass posture assessment on one pod and
> get isolated if the move to a different pod. Many management tasks need t=
o
> be performed on each pod individually.****
>
> ** **
>
> Feel free to contact me off-list if you want more information.****
>
> ** **
>
> *Bruce Osborne*****
>
> *Network Engineer*****
>
> *IT Network Services*****
>
> ****
>
> *(434) 592-4229*****
>
> ****
>
> *LIBERTY UNIVERSITY*
>
> *Training Champions for Christ since 1971*
>
> ** **
>
> *From:* Rose, Chuck [mailto:crose@ucsd.edu]
> *Sent:* Wednesday, July 18, 2012 12:06 PM
> *Subject:* Re: NAC Solutions****
>
> ** **
>
> Hi all =96 ****
>
> ** **
>
> We have a Cisco infrastructure, except for a couple of areas still using
> Avaya AP-8 WAPs (to be upgraded over the next few years to Cisco). We are
> currently using an old home grown solution for registration, as well as a=
n
> initial posture assessment, for our ResNet population (about 10K users). =
We
> have been looking at Impulse Point, Cisco, and most recently, Bradford. O=
ur
> campus network/security groups are looking at eventually expanding the
> solution to the entire campus, depending on how it works for ResNet. If a=
ny
> of you have any strong feelings about any of those, negative or positive,
> or have any other solutions that you think we should look at, would you
> mind contacting Scott Wu and I?****
>
> ** **
>
> Thanks!****
>
> ** **
>
> Chuck Rose****
>
> crose@ucsd.edu****
>
> UCSD ResNet Manager****
>
> ** **
>
> Scott Wu****
>
> scottw@ucsd.edu****
>
> UCSD ResNet Coordinator****
>
> ** **
>
> *From:* Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] *On Behalf Of *Nic=
k
> Werder
> *Sent:* Wednesday, July 18, 2012 5:29 AM
> *To:* RESNET-L@LISTSERV.ND.EDU
>
> *Subject:* Re: [RESNET-L] NAC Solutions****
>
> ** **
>
> Michael,****
>
> ** **
>
> Here, at the University of Florida, we have been using Impulse SafeConnec=
t
> for posture assessment of all our resident=92s devices. This summer the r=
est
> of campus also started deploying SafeConnect in conjunction with our
> unified wireless project. In the early stages of this project we did
> research several other NAC solutions and decided to go with Impulse.
> However, SafeConnect is only used for posture assessment. We implemented
> 802.1x using open source products that work excellently and allow for a l=
ot
> of flexibility; and they are free. Don=92t hesitate to contact me if you
> would like more details.****
>
> ** **
>
> Nick****
>
> ** **
>
> Nick Werder | Network Security Administrator****
>
> University of Florida Department of Housing and Residence Education****
>
> PO Box 112100 | Gainesville, FL 32611-2100****
>
> office 352.392.2171 x10126 | fax 352.392.6819 | NickW@housing.ufl.edu****
>
> ** **
>
> *Nick Werder* | *Network Security Administrator*
> University of Florida Department of Housing and Residence Education
> PO Box 112100 | Gainesville, FL 32611-2100
> office 352.392.2171 x10126 | fax 352.392.6819 | NickW@housing.ufl.edu
> *StrengthsQuest Top 5:* Achiever, Deliberative, Learner, Maximizer,
> Relator - Find Out More<http://www.strengthsquest.com/content/141728/inde=
x.aspx>
>
> Please consider the environment before printing this email.****
>
> *From:* Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU<RESNET-L@LISTSERV.=
ND.EDU>]
> *On Behalf Of *Callahan, Michael (RTA)
>
> *Sent:* Tuesday, July 17, 2012 5:08 PM
> *To:* RESNET-L@LISTSERV.ND.EDU
> *Subject:* NAC Solutions****
>
> ** **
>
> Resnet,****
>
> ** **
>
> We at the University of Montana currently employ a proprietary NAC
> solution. However, we are looking at other NAC products(specifically,
> SafeConnect and Cisco NAC). Does anyone use either of these solutions? If
> so, can you please e-mail me so we can discuss the costs, benefits,
> short-comings, etc. Thanks in advance for you time.****
>
> ** **
>
> ** **
>
> *Michael Callahan*
>
> * *
>
> *RTA Coordinator*
>
> *Student Affairs IT*
>
> *University of Montana*
>
> ** **
>
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list. ****
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html____________________________=
_______________________
> ****
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--14dae9d7171a38063004c5311664
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
>
<span style=3D"color:rgb(31,73,125)">Depending on your requirements, Impuls=
e Point may be a good solution. Since they do</span><div><span style=3D"col=
or:rgb(31,73,125)">> not currently have a good system for self-registeri=
ng non-802.1X devices</span>=A0</div>
<div><br></div><div><span style>I'm pretty sure that the version they a=
re currently rolling out can do this with what appears to be a brand new us=
er self-service portal.</span></div><div><br></div><div><br></div><div>
<br></div><div><br>
<br><br><div class=3D"gmail_quote">On Thu, Jul 19, 2012 at 8:12 AM, Osborne=
, Bruce W <span dir=3D"ltr"><<a href=3D"mailto:bosborne@liberty.edu" tar=
get=3D"_blank">bosborne@liberty.edu</a>></span> wrote:<br><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;p=
adding-left:1ex">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Chuck,<u></u><u></u></=
span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">From your web site, I =
notice that you have about 30k students. Depending on your requirements, Im=
pulse Point may be a good solution. Since they do not currently have a good=
system for self-registering non-802.1X
devices, we needed to look elsewhere to Aruba ClearPass.<u></u><u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Liberty University is =
also a Cisco shop, except for wireless. =A0In our experience, the Bradford =
solution did not scale well and was difficult to manage once you need more =
than one set of servers (=93pod=94). In our
experience with primarily wireless users on open SSIDs with the persistent=
agent, we found server performance began to suffer =A0around 5000 to 6000 =
concurrent users per server. Bradford has refreshed their hardware offering=
s, so performance may be improved
slightly. Their management server solution will allow the pods to share re=
gistration information, but not client posture status, A user may pass post=
ure assessment on one pod and get isolated if the move to a different pod. =
Many management tasks need to be
performed on each pod individually.<u></u><u></u></span></p><div>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Feel free to contact m=
e off-list if you want more information.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:"Verdana","sans-s=
erif";color:#001b3e">Bruce Osborne</span></b><span style=3D"font-size:=
10.0pt;font-family:"Verdana","sans-serif";color:#001b3e=
"><u></u><u></u></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><i><=
span style=3D"font-size:10.0pt;font-family:"Verdana","sans-s=
erif";color:#001b3e">Network Engineer</span></i><span style=3D"font-si=
ze:10.0pt;font-family:"Cambria","serif";color:#1f497d">=
<u></u><u></u></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:"Verdana","sans-s=
erif";color:#001b3e">IT Network Services</span></b><span style=3D"font=
-size:10.0pt;font-family:"Cambria","serif";color:#1f497=
d"><u></u><u></u></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><spa=
n style=3D"font-size:10.0pt;font-family:"Verdana","sans-seri=
f";color:#001b3e">=A0</span><span style=3D"font-size:10.0pt;font-famil=
y:"Cambria","serif";color:#1f497d"><u></u><u></u></span=
></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:"Verdana","sans-s=
erif";color:#001b3e"><a href=3D"tel:%28434%29%20592-4229" value=3D"+14=
345924229" target=3D"_blank">(434) 592-4229</a></span></b><span style=3D"fo=
nt-size:10.0pt;font-family:"Cambria","serif";color:#1f4=
97d"><u></u><u></u></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><spa=
n style=3D"font-size:10.0pt;font-family:"Verdana","sans-seri=
f";color:#001b3e">=A0</span><span style=3D"font-size:10.0pt;font-famil=
y:"Cambria","serif";color:#1f497d"><u></u><u></u></span=
></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:"Verdana","sans-s=
erif";color:#aa0000">LIBERTY UNIVERSITY<u></u><u></u></span></b></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><i><=
span style=3D"font-family:Times-Roman;color:#aa0000">Training Champions for=
Christ since 1971<u></u><u></u></span></i></p>
</div>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
</div><div>
<div style=3D"border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:"Tahoma","sans-serif""> Rose, Ch=
uck [mailto:<a href=3D"mailto:crose@ucsd.edu" target=3D"_blank">crose@ucsd.=
edu</a>]
<br>
<b>Sent:</b> Wednesday, July 18, 2012 12:06 PM<br>
<b>Subject:</b> Re: NAC Solutions<u></u><u></u></span></p>
</div>
</div><div>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Hi all =96 <u></u><u><=
/u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">We have a Cisco infras=
tructure, except for a couple of areas still using Avaya AP-8 WAPs (to be u=
pgraded over the next few years to Cisco). We are currently using an old ho=
me grown solution for registration,
as well as an initial posture assessment, for our ResNet population (about=
10K users). We have been looking at Impulse Point, Cisco, and most recentl=
y, Bradford. Our campus network/security groups are looking at eventually e=
xpanding the solution to the entire
campus, depending on how it works for ResNet. If any of you have any stron=
g feelings about any of those, negative or positive, or have any other solu=
tions that you think we should look at, would you mind contacting Scott Wu =
and I?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Thanks!<u></u><u></u><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Chuck Rose<u></u><u></=
u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><a href=3D"mailto:cros=
e@ucsd.edu" target=3D"_blank">crose@ucsd.edu</a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">UCSD ResNet Manager<u>=
</u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Scott Wu<u></u><u></u>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><a href=3D"mailto:scot=
tw@ucsd.edu" target=3D"_blank">scottw@ucsd.edu</a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">UCSD ResNet Coordinato=
r<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
</div><div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0i=
n 0in 4.0pt">
<div>
<div style=3D"border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:"Tahoma","sans-serif""> Resnet F=
orum
<a href=3D"mailto:[mailto:RESNET-L@LISTSERV.ND.EDU]" target=3D"_blank">[mai=
lto:RESNET-L@LISTSERV.ND.EDU]</a>
<b>On Behalf Of </b>Nick Werder<br>
<b>Sent:</b> Wednesday, July 18, 2012 5:29 AM<br>
<b>To:</b> <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU" target=3D"_blank">RE=
SNET-L@LISTSERV.ND.EDU</a></span></p><div><br>
<b>Subject:</b> Re: [RESNET-L] NAC Solutions<u></u><u></u></div><p></p>
</div>
</div><div>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Michael,<u></u><u></u>=
</span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Here, at the Universit=
y of Florida, we have been using Impulse SafeConnect for posture assessment=
of all our resident=92s devices. This summer the rest of campus also start=
ed deploying SafeConnect in conjunction
with our unified wireless project. In the early stages of this project we =
did research several other NAC solutions and decided to go with Impulse. Ho=
wever, SafeConnect is only used for posture assessment. We implemented 802.=
1x using open source products that
work excellently and allow for a lot of flexibility; and they are free. Do=
n=92t hesitate to contact me if you would like more details.<u></u><u></u><=
/span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Nick<u></u><u></u></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
</div><p class=3D"MsoNormal"><span style=3D"color:#1f497d">Nick Werder | Ne=
twork Security Administrator<u></u><u></u></span></p><div>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">University of Florida =
Department of Housing and Residence Education<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">PO Box 112100 | Gaines=
ville, FL 32611-2100<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">office <a href=3D"tel:=
352.392.2171%20x10126" value=3D"+13523922171" target=3D"_blank">352.392.217=
1 x10126</a> | fax <a href=3D"tel:352.392.6819" value=3D"+13523926819" targ=
et=3D"_blank">352.392.6819</a> |
<a href=3D"mailto:NickW@housing.ufl.edu" target=3D"_blank">NickW@housing.uf=
l.edu</a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p>
</div><p></p><div><b><span style=3D"font-size:10.0pt;font-family:"Cali=
bri","sans-serif";color:#0021a5">Nick Werder</span></b><span=
style=3D"font-size:10.0pt;font-family:"Calibri","sans-serif=
"">=A0|
<b><span style=3D"color:#ff4a00">Network Security Administrator</span></b><=
/span><br>
<span style=3D"font-size:10.0pt;font-family:"Calibri","sans-=
serif"">University of Florida Department of Housing and Residence Educ=
ation<br>
PO Box 112100 | Gainesville, FL 32611-2100<br>
office <a href=3D"tel:352.392.2171%20x10126" value=3D"+13523922171" target=
=3D"_blank">352.392.2171 x10126</a>=A0| fax=A0<a href=3D"tel:352.392.6819" =
value=3D"+13523926819" target=3D"_blank">352.392.6819</a> | <a href=3D"mail=
to:NickW@housing.ufl.edu" title=3D"Click to send email to Nick Werder" targ=
et=3D"_blank">
NickW@housing.ufl.edu</a></span><br>
</div><strong><span style=3D"font-size:10.0pt;font-family:"Calibri&quo=
t;,"sans-serif"">StrengthsQuest Top 5:</span></strong><span style=
=3D"font-size:10.0pt;font-family:"Calibri","sans-serif"=
"> Achiever, Deliberative, Learner, Maximizer, Relator -
<a href=3D"http://www.strengthsquest.com/content/141728/index.aspx" target=
=3D"_blank">Find Out More</a></span><div><br>
<span style=3D"font-size:10.0pt;font-family:"Calibri","sans-=
serif";color:darkgreen">Please consider the environment before printin=
g this email.</span><u></u><u></u></div><p></p>
<div>
<div style=3D"border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:"Tahoma","sans-serif""> Resnet F=
orum [<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU" target=3D"_blank">mailto:=
RESNET-L@LISTSERV.ND.EDU</a>]
<b>On Behalf Of </b>Callahan, Michael (RTA)</span></p><div><br>
<b>Sent:</b> Tuesday, July 17, 2012 5:08 PM<br>
<b>To:</b> <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU" target=3D"_blank">RE=
SNET-L@LISTSERV.ND.EDU</a><br>
<b>Subject:</b> NAC Solutions<u></u><u></u></div><p></p>
</div>
</div><div>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal">Resnet,<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal">We at the University of Montana currently employ a p=
roprietary NAC solution. However, we are looking at other NAC products(spec=
ifically, SafeConnect and Cisco NAC). Does anyone use either of these solut=
ions? If so, can you please e-mail
me so we can discuss the costs, benefits, short-comings, etc. Thanks in ad=
vance for you time.<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal"><i>Michael Callahan<u></u><u></u></i></p>
<p class=3D"MsoNormal"><i><u></u>=A0<u></u></i></p>
<p class=3D"MsoNormal"><i>RTA Coordinator<u></u><u></u></i></p>
<p class=3D"MsoNormal"><i>Student Affairs IT<u></u><u></u></i></p>
<p class=3D"MsoNormal"><i>University of Montana<u></u><u></u></i></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
</div><p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&q=
uot;Times New Roman","serif"">______________________________=
_____________________ You are subscribed to the ResNet-L mailing list.
<u></u><u></u></span></p><div>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<u></u><u></u></p>
</div></div>
</div>
</div>
</blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--14dae9d7171a38063004c5311664--
