- Microsoft will float cloud OS this month
- Top 16 Chinese iPhoneys
- Pimp your ride: Cool car technology
- Laptop stolen from McCain campaign
- Cisco, Microsoft roll out server, networking appliance
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Value of WDS
Cisco is planning a hybrid of its NAC schemes that will address customer concerns about the complexity, maintenance and speed of the company’s current options.
The upgrades would make it possible for customers to buy Cisco’s NAC appliance - the NAC option most of its customers opt for first - and later migrate to its network-based NAC Framework architecture without having to swap out as many elements.
Currently NAC Appliance and NAC Framework use different client software to evaluate the security posture of network endpoints as part of the NAC process. And the NAC Framework relies on its Access Control Server (ACS) to determine which access policy to apply while the NAC Appliance relies on its separate management server to determine if endpoints are in compliance.
Cisco calls the more unified NAC picture oneNAC, according to a source knowledgeable about what Cisco is saying to its customers about its NAC road map.
One of the problems all NAC customers face is that NAC appliances in general don’t scale large enough to accommodate a large corporate wide deployment without using many appliances, says Rob Whiteley, an analyst with Forrester Research.
The solution is network-based NAC that scales to large deployments without requiring a proliferation of new devices on the network, he says. A migration strategy between appliance and network-based NAC would simplify customers’ transitions to wider NAC deployments.
Cisco describes its NAC plans as a path for customers to buy its NAC Appliance now and migrate to its NAC Framework over time.
“Our customers like to start with NAC Appliance because it's easier and doesn't require upgrading their infrastructure gear all at once, but they also like many aspects of the Framework approach,” a Cisco spokesman said in an e-mail.
“So in interpreting 'oneNAC', it refers to making sure both solutions are interoperable with each other, that customers get investment protection, etc. That way, customers can upgrade infrastructure as part of the natural refresh cycle while getting started with NAC.”
One of Cisco’s NAC options is an appliance that can sit inline with traffic to enforce access policies. The throughput is 1Gbps, a limiting factor for faster networks.
The appliance can also be deployed out of the traffic stream - out-of-band - and use Cisco network switches to enforce NAC policies.

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
Security Considerations When Deploying Remote Access SolutionsEffective network security is most successful when you use a layered approach, with multiple...

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Turning information into a Competitive AdvantageCompanies today are realizing that competitive advantage is harder to sustain when based solely on...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (2)
Cisco Confusion - Good for Everyone ElseBy mrmclean on September 5, 2007, 7:33 pmWhile customers blindly waiting for Cisco to get its NAC story right might suffer from these kinds of announcements, the rest of the customers - and market - benefits....
Reply | Read entire comment
Cisco planning oneNAC for easier NAC deploymentBy Cisco Subnet on August 31, 2007, 1:37 pmCisco is developing oneNAC, a hybrid of its NAC schemes with the aim of making it easier for customers to maintain, deploy and scale up Cisco NAC, according to a...
Reply | Read entire comment
View all comments