Cisco Systems has beefed up its Network Admission Control (NAC) framework for intrusion protection, including the addition of a hardware appliance.The company has released Version 2.0 of NAC, software that lets administrators set policies for ensuring end-user network security. It now includes support for Cisco Catalyst switches and wireless solutions.
NAC 2.0 goes beyond its origins as a user authentication service to one that verifies the spyware and anti-virus protection on every device on the network. The first version only covered Cisco’s IOS routers.
Some VARs may find the most interesting news is the beginning of a turnkey NAC appliance solution.
The company’s first so-called appliance, formerly called the Cisco Clean Access, was strictly software-based. That meant customers had to provide a server for it.
Now Cisco has brought out a rack-mountable server that can be dropped into a network.
Aimed at mid-size companies, the NAC Appliance means customers don’t have to take the time to install the software on a separate server, said Alex Thurber, Cisco’s director of worldwide channels.
“If there’s a problem (with hardware or software) it’s the same (phone) number,” he added. “You call Cisco and we handle it.”
So far there’s only one model of the $3,995 (all prices US) NAC Appliance, which needs separately sold Web-based management software called Clean Manager. To encourage sales, Cisco has created specially-priced bundles.
The Commercial Server bundle includes the server licensed for 100 concurrent users for $4,995, 250 users for $10,995 and 500 users for $18,995.
On top of that users have to spend $4,995 for Clean Manager Light, which manages up to three servers.
There are also enterprise versions for up to 1,500 users, with optional failover bundles.
Adding Catalyst switches, which are inside the firewall, to NAC protects portable devices that can be taken outside the network — where they could be infected or not updated with the latest AV signatures — and then brought back and plugged in.
Thurber said NAC offers Cisco partners many opportunities to sell services.
In an interview Chris Thatcher, a principal consultant at Dimention Data of Reston, Va., and a Cisco global partner, agreed. NAC links to some 60 third-party software and hardware devices. Some customers will need advice and integration services, he said.