Multiple Policies in a NAC box

Unanswered Question
Jan 13th, 2009
User Badges:

Hi All,

Can I use a single NAC appliance (or module on a router) and configure several different policies for different kind of users?

In other words... I need my NAC CAS 3310 to apply some policies to my local users, another policies to the VPN users, and another set of policies to the Wireless users... Is this possible in a single box or do I need a separate NAC hardware for each policy?

Thank you for your help!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
drienties Tue, 01/13/2009 - 23:10
User Badges:

The NAC Manager is where you configure all you're policies for all you're users. The Manager in turn controls all the NAC Servers within the network which enforce these policies.

Depending on you're choice of deployment(in-band/out-of-band/Virtual-Gateway/Real-IP) it is very likely that you are going to need more than 1 NAC Server to control all your network entry points effectivly.

Certain combinations are possible, you could for example control L2 LAN segments and Cisco Wireless Controllers with the same NAC server in L2 Out-of-Band Virtual Gateway mode.


This Discussion