NAC Appliance reporting to MARS

Answered Question
Mar 13th, 2007

Can MARS be configured to received reports from NAC Appliance CAM/CAS? There isn't an option for for NAC under MARS devices.

Thanks,

-KK

I have this problem too.
0 votes
Correct Answer by pmccubbin about 9 years 9 months ago

I apologize for not going too deep with my response. Fortunately, there are NetPros who know NAC much better than I do.

In sum:

"When deploying NAC Framework in your network, if the NAC router is already set up to send syslogs and NetFlow events to MARS, all you have left to do is configure the router to send NAC specific syslogs."

To answer your question, it's not the CAM/CAS but the router that needs to be configured in MARS. This is why you see no option under MARS devices for the CAM/CAS.

Hope this helps.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
pmccubbin Thu, 03/15/2007 - 04:23

I apologize for not going too deep with my response. Fortunately, there are NetPros who know NAC much better than I do.

In sum:

"When deploying NAC Framework in your network, if the NAC router is already set up to send syslogs and NetFlow events to MARS, all you have left to do is configure the router to send NAC specific syslogs."

To answer your question, it's not the CAM/CAS but the router that needs to be configured in MARS. This is why you see no option under MARS devices for the CAM/CAS.

Hope this helps.

ishah Thu, 03/22/2007 - 16:29

NAC Framework is not NAC Appliance and does not work the same way. Framework is based on 802.1x. CAM/CAS is based on either being inline or via SNMP Control of switches with no ACS involvment at present.

NAC Appliance (CAM/CAS) is not currently supported under MARs as far as I know.

You can syslog basic info out of the Appliance but it will tell you things like if the update succeede or failed for the CAS and various other information.

Hopefully soon it will send out posture assessment messages into MARs or other SIM/SEM type products.

What info do you want to get out of it.

Actions

This Discussion