would be glad if you can throw more light on the peculiarities of NAC detailing it’s authentication process and cryptography technique involved.

thanks

Chijioke
MSc student
Wireless network(QMUL)

Thanks for the pointers, I read your post. I agree NAC has been tough to implement. That’s why I’ve spent the last couple years focusing on establishing the identity controls that provide meaningful audit and compliance actions rather than looking at only the health of the machine (typically the focus of NAC). I think machine health is actually the least important factor in a network identity decision because there are so many controls already on the endpoint to enforce this. This is the core focus of the ANA paper and why I think a small number of roles in a network coupled with comprehensive authentication is an enormous benefit to most organizations. I’d love your feedback.

Thanks,

Sean

But the main point that the article misses is the actual success of implementing a NAC infrastructure - it is still a solution laced with problems and difficulties. And this fact is actually the main driver to minimize the number of profiles - the less profiles, the easier to debug and recover from issues

I did a series of interviews on the topic within a company, from CEO down to NetAdmin. You can read the conclusions here
http://www.shortinfosec.net/2008/06/network-access-control-solution-with.html

Bozidar Spirovski
http://www.shortinfosec.net