Lockdown Networks is adding a self-registration feature to its NAC gear, something that is particularly needed by colleges, and can be useful in businesses as well.

The feature enables users to register devices via a gateway page that is generated when a new device is attached to the network. So a student bringing a new game box to school and plugging it in for the first time would register the machine online.

Depending on school policy the box might be authenticated to connect to a game virtual LAN, for instance. This saves the schools from the time consuming practice typically requiring students to bring such devices to an IT office; have someone record the MAC address for it; and then add it to access lists.

Because the Lockdown gear monitors traffic after devices are admitted, it can also check that the activity of these devices remains within acceptable policies. So a game box that starts sending peer-to-peer traffic could be shut out.

Enterprises could use the same feature with contractors. A designated employee - not necessarily an IT staffer - can authorize guest access and the guests can register their own machines. Again, the behavior of the device can be monitored and restricted.

Lockdown is also adding a RADIUS server to its Enforcer NAC devices, so it can authenticate users on its own rather than defer them to a separate server. This could be used for authenticating guests to the network if customers wanted to delegate the task to employees who do not have access to the corporate server.