Immunize Networks with Policy Enforcement

Cisco NAC Appliance (formerly Cisco Clean Access) is an easily deployed Network Admission Control (NAC) product that uses the network infrastructure to enforce security policy compliance on all devices seeking to access network computing resources. With NAC Appliance, network administrators can authenticate, authorize, evaluate, and remediate wired, wireless, and remote users and their machines prior to network access. It identifies whether networked devices such as laptops, IP phones, or game consoles are compliant with your network's security policies and repairs any vulnerabilities before permitting access to the network.

Networks with Cisco NAC Appliance can realize benefits such as:

• Minimized network outages
• Enforcement of security policies
• Significant cost savings with automated device repairs and updates

Cisco NAC Appliance extends NAC to all network access methods, including access through local area networks (LANs), remote-access gateways, and wireless access points. Cisco NAC Appliance also supports posture assessment for guest users.

When deployed, Cisco NAC Appliance provides the following benefits:

• Recognizes users, their devices, and their roles in the network. This first step occurs at the point of authentication, before malicious code can cause damage.
• Evaluates whether machines are compliant with security policies. Security policies can include specific antivirus or antispyware software, OS updates, or patches. Cisco NAC Appliance supports policies that vary by user type, device type, or operating system.
• Enforces security policies by blocking, isolating, and repairing noncompliant machines.

Noncompliant machines are redirected into a quarantine area, where remediation occurs at the discretion of the administrator.

Cisco NAC Appliance offers immediate NAC functionality today and, to protect your investment, will be interoperable with the NAC Framework architecture.