topic Re: NAC support? in Network Security

NAC support?

mdrake — Fri, 21 Feb 2020 08:07:15 GMT

Hi,

Is NAC supported on the Catalyst 6500s with Sup2/MSFC2?

Thanks,

MRD

Re: NAC support?

pcomeaux — Tue, 03 May 2005 12:49:29 GMT

Hey there -

NAC as a feature of the CAT OS or IOS is not available today. This feature will hopefully be available in the next few months.

NAC Out of Band is available today as a dedicated appliance. You can find more information here at: http://www.cisco.com/go/cca

I recommend to most customers to start with NAC on router at a Layer 3 hop in their network. I strongly recommend starting a NAC implementation at a L3 hop before the Internet Firewall.

This permits you to prepare for when NAC is released for the switches and lets your users become accustomed to being checked for compliance and trust as they use your network.

Let us know if you have any follow up questions.

thanks

peter

Re: NAC support?

nchong — Wed, 18 May 2005 04:28:36 GMT

Hello,

NAC appliance (CCA) supports the following platform:

Cat 2950, 3550, 3560, 3750, 4500, 6500.

Nick

Re: NAC support?

steking — Tue, 07 Jun 2005 20:20:11 GMT

Hey Peter,

Thanks again for helping me understand NAC better. It was a pleasure meeting you.

Is there a policy server or an update to ACS 3.3 that will enable us to scan for what version of Internet Explorer a user has and place that user in an appropriate Group?

I'm also trying to find a way to automatically open an IE browser window on an unknown client's system.

Thanks,

Stephen

Re: NAC support?

pcomeaux — Wed, 08 Jun 2005 19:42:21 GMT

Hi Stephen -

I am glad I could be of help!

Checking for custom apps like IE is not a check CTA can currently do. This may become a feature in a version of CTA late this year.

For users who fall into the group of Unknown, the user's can experience a web page redirect when they attempt to connect to a website (which they are denied to) on the other side of a NAC enabled router.

There's no mechanism to automatically open a browser, though, for any Group within NAC today.

thanks

peter

Re: NAC support?

greg_walton — Mon, 05 Mar 2007 21:18:46 GMT

Is HSRP on two 6500's with NAC supported? What about WSLM?

Re: NAC support?

pcomeaux — Mon, 05 Mar 2007 21:21:58 GMT

Yes, NAC Appliance can be implemented with 6500s using HSRP on vlans. NAC Appliance can also be deployed in Wireless deployments, both LWAPP and Autonomous wireless environments.

peter

Re: NAC support?

shahmanishv — Wed, 25 Apr 2007 08:16:17 GMT

Dear Peter,

I am using Cisco NAC 4.1.0.2.

Even though I upload Nessus plugin and I get message that plugin was successfully updated. I can not see any plugins.

Is there any bug ?