We use Impulse as well. We liked it because it doesn't require VLANs to do NAC, so we didn't really see that as weakness. There is no dependence upon particular switch vendors or features, and it fails open.
Pete Morrissey Syracuse University -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[EMAIL PROTECTED] On Behalf Of Mark Berman Sent: Tuesday, October 28, 2008 7:26 AM To: [email protected] Subject: Re: [WIRELESS-LAN] NAC Replacement? Tim, Impulse is a great product with most of the capabilities of a NAC except for the ability to assign VLAN. If that doesn't matter then I highly recommend it. I'd also recommend taking a look at Packetfence. It's an open source solution that can work either in-band or out-of-band and can do VLAN assignment with Cisco switches (among others). You can get commercial support for Packetfence from Inverse Conseille in Montreal. They're very good. http://www.inverse.ca/english.html We use Packetfence for NAC and Impulse for policy enforcement. The combination does everything we want. - Mark ---- Original message ---- >Date: Mon, 27 Oct 2008 08:36:24 -0500 >From: Timothy Payne <[EMAIL PROTECTED]> >Subject: NAC Replacement? > > Good Morning! > > I also sent this message to the NETMAN list, so if you are > receiving it twice, I apologize... > > There was recently a thread on the Wireless-LAN listserv about > what colleges are using for wireless NAC. I have a follow up to > that discussion that I hope other schools can help me with. > > We are currently at a point of needing to either replace our > Brandford Campus Manager hardware, or move to a new product. Our > goal is to require registration on dorm wired network, and all > wireless networks on campus. My issue right now is timing...I've > been asked to give management the following by Friday: > > 1) Is there another product that we need to evaluate in-depth as a > possisble replacement for Brandford? > > 2) If so, what are ballpark pricing numbers for a new system, as > compared to the cost of buying the new Bradford servers? > > We are an all-Cisco shop...WLC 4400s for our wireless, and > enterprise switches for the wired LAN. Our enrollment is around > 2000 students, and staff and faculty is another 1200. I have the > following products on our 'short list', though I would be open to > looking at other products as well. > > Bradford Campus Manager (the incumbent) > Cisco Clean Access > Impluse Safe Connect > IDEngines (though I've heard they are going out of business. Can > anyone confirm or deny that?) > > My ultimate goal is an 802.1x solution that easy for the user > community, which I know is asking for a lot. > > Any assistance you can provide in answering the following > questions would be great: > > 1) What product do you recommend (or which should I avoid)? Why? > > 2) Does it run in-band, or out-of-band? The college would prefer > something that is a fail-open product in the event of a problem. > > 3) Do you recall the pricing when you purchased it, and how much > is annual maintenance? Do you have a good sales contact we could > connect with to get ballpark pricing QUICKLY? > > Thank you for your assistance! > > -- > Tim Payne, CISSP, CCNA > Network Administrator > Macalester College > ********** Participation and subscription information for this > EDUCAUSE Constituent Group discussion list can be found at > http://www.educause.edu/groups/. >________________ ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
