Prevent WLAN access to users with virus?

becca1jane · ‎06-07-2009

Is there any way to prevent users with a virus from accessing our wireless network? Intrusion Protection and NAC are not yet installed. Would I need to temporarily enable MAC filtering on the WLANs and add the MAC of each wireless device I have verified is not infected? Thanks.

Peter Nugent · ‎06-07-2009

ACS has some posture validation capabilities, however I have never used them? This may resolve the issue in the short term.

MAC filtering can cause an administrative headache with a large client base.

A propper NAC solution is the way to go with WIDS and WIPS.

dennischolmes · ‎06-08-2009

Agreed! Use NAC or some form of NAC.

Leo Laohoo · ‎06-08-2009

You need NAC, Cisco's Clean Access, or NAP (MS).

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps8418/ps6128/product_data_sheet0900aecd802da1b5.html

Hope this helps.