Compliance for computer connecting to ASA5510 through VPN.

[sboivin]

I would like to check VPN clients for Antivirus and MS updates before they connect to the VPN.

Does the ASA do this? Is there a Cisco product I need that does this?

[pmajumder]

Hello,

We use Cisco Clean Access (now called Cisco NAC Appliance) for just this purpose - checks for AV, MS Updates, Anti-spyware, and Windows version.

Please see following link for more information:

http://www.cisco.com/en/US/products/ps6128/index.html

Regards

Pradeep

[sboivin]

Man, 6,000 dollar piece of hardware just to check if a system is upto date.

Any cheaper options?

[pmajumder]

I know it's an expensive solutions, but it was worth it for us. Cisco is the only one I am familiar with, but here's a link to an article that lists other vendors that you may check up with.

http://searchnetworking.techtarget.com/originalContent/0,289142,sid7_gci1166734,00.html

Regards

Pradeep