Who is using NAC (Network Access Control) for wireless client authentication and posturing?
1) What solution did you select? Impulse SafeConnect 2) How easily did it integrate with you existing infrastructure? We were the pilot for some advanced 802.1x functionality, but it integrated nicely. Radius authentication starts and stops are passed to the NAC. Phase 1, this replaced a large portion of a homegrown solution. 3) What is your existing infrastructure and wireless solution? Cisco LWAPP thin APs 4) How well has it performed? Very well with some tuning. The developers are excellent to work with. The solution provides an agent that assists with continuous posture checking and quarantine for Windows Machines. There is an agent for the Mac with less functionality at this time. 5) If you had to do it again would you select the same product? Yes. 6) What were the success and failures of the deployment? The deployment is a success. Opening went very smoothly. The vendor is making progress on the remaining feature requests. 7) What was the impact on your technical staff to prepare for deployment? We did move all management interfaces for the network and other infrastructure to a separate private network. I recommend doing this regardless of product selection. We did a lot of testing. 8) How well does it scale? We are approaching 5200 concurrent users on wireless and growing. We also manage our wired resnet networks. Phase 1. 9) How are the management tools and maintenance for the solution? The management tools are minimal. The solution is pretty much a packaged service so maintenance has been limited and the support has been terrific. We developed our own reporting tools and have turned them over to the vendor who has expressed an interest in integrating similar functionality. Now on to Phase2. Thank a million, You are welcome a million. There are going to be more questions, please feel free to write me off-list for more answers. Randy Grimshaw Syracuse University [EMAIL PROTECTED] ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
