VPN Anti-virus checking with NAC

[bberry]

Can I use the NAC settings on the ASA to check anit-virus and / or windows updates for a client? If so are there any docs that give limitations, compatability and setup instructions?

Brent

[Federico Coto Fajardo]

Hi,

I have not really done it, but it seems you can use NAC features in the ASA to check for virus, worms, etc.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/vpnnac.html

Federico.

[akearns02]

OPSWAT recently released GEARS to extend this functionality to accomodate a broader set of categories, including hard disk encryption, as well as the ability to detect malware on the devices. You can easily include GEARS in the ASA by integrating the registry check into the DAP. You can read more about it at: https://gears.opswat.com/integration/secure-access.