Traffic Control in NAC

[Bryan Wulfric]

Hi all,

Is it possible to control traffic after user is authenticated by NAC? For example, a user can only access the server segment, not to other segment. From what i understand, after user is authenticated by NAC, that user is put to trusted segment and server segment is also in trusted segment, so i think it is not possible. Maybe other have another opinion?

Thanks.

[Federico Ziliotto · Accepted solution]

Hi Brian,

You can keep controlling traffic with NAC if you have a Clean Access Server (CAS) deployed inline for example:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cas/s_trfpol.html

Regards,

Fede

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.