Need method to identify new hardware on the network

[michael_judd]

We have had a request to configure ASAs (or routers if necessary) so that we can be notified when new devices are added to the network (PCI compliance requirement).

Cisco pre-sales says that there's no way.  Surely with SNMP, TCL, EEM, or other, there's some way to compare ARP tables, MAC addresses, or other, to check if new devices have been added.

Anyone have thoughts on making this happen?

Thanks greatly,

Mike

[Panos Kampanakis]

The only thing I can think of is access control that also checks what devices are attached to the network.

NAC, port security, 802.1x and such. They are responsible for controlling new mac addresses connecting to the network and making sure it has software and patches needed.

PK