topic Re: NAC deployment in Network Security

NAC deployment

IT_Data_CorporateNet — Fri, 21 Feb 2020 09:52:48 GMT

Hello there!

I have 2 NAC Appliance 3310. I want to configure them both as Clean Access Servers(CAS). One will be fail over for the other. In this deployment i will have no Clean Access Manager. Is this possible? If possible how will i configure the CAS without CAM? Is it possible also to install the CAM software in a different hardware other than NAC Appliances(Like normal PCs or Server machines)

Best regards,

Stanslaus.

Re: NAC deployment

pmccubbin — Tue, 29 Jan 2008 21:47:59 GMT

Hi Stanslaus,

You need one Clean Access Manager (CAM) and one Clean Access Server (CAS) at a minimum to make any In-band or Out-of-band solution work. What's more, the CAM and the CAS cannot be installed on the same server.

Here are some excellent references to consult:

http://cisconac.blogspot.com/

http://www.networkworld.com/community/heary

http://blog.tenablesecurity.com/

http://blogs.cisco.com/security

http://6200networks.com/

http://www.demolabs.co.uk/cisconac_demo.html

Cisco Security Center http://tools.cisco.com/security/center/home.x

Books:

Cisco NAC Appliance: Enforcing Host Security with Clean Access by Jamey Heary, Jerry Lin, Chad Sullivan, Alok Agrawal. (2007)

Hope this helps.

Best,