NAC and CSA MC

[study_voip]

Gents,

I have two questions,

is there any way to detect/block application, like emule, bittorrent etc by the NAC or CSA MC?

I installed Nessus plugin, and found there is a Bittorrent detect, and I put the action to Hole, but did not work

2nd question,

for newer Windows update or AV update, before I push to the end workstation, can I evaluate first by NAC or MC?

thanks

[gojericho0]

Hello,

I block bit torrents by creating an Application Control rule to Deny any well know bit torrent apps to execute. I also create a file access rule to deny read/write access to any .tor file extension. This has help greatly. Also as another defense if you have any application monitoring devices on your network, you can create rules in them to block bit torrent behavior as well

I know with the NAC appliance you can create rules and requirements that check with your WSUS and anti-virus policy server so that only updates/patches/hotfixes you approve are checked for compliance.