RE: NAC solutions?

We are in the process of setting up a NAC from AEP. We're a small, rural hospital but we do have auditors (clinical and non-clinical) who come on site and bring their own laptops. Due to HIPAA regulations (and just plain common sense) we decided to protect certain ports (such as conference rooms, classrooms).

The device has been configured and we are now in the testing stage. My first impression is that setting up a NAC is going to be as painful as setting up an IDS; lots of fine-tuning until you get it down to where you want it.

Paul Chinnery
Network Administrator
Memorial Medical Center

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx]On Behalf Of Gibbs, Jason
Sent: Wednesday, August 29, 2007 5:14 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: NAC solutions?


Hey all, I was wondering if anyone has delved into the NAC realm. I have seen demos of various NAC products from Mirage, Insightx, ForeScout. Etc. and they seem great for internal protection if they indeed work as good as they say J
I am looking for an out of band clientless solution. We already have Cisco 802.1x capable devices.
So basically has anyone implemented a NAC solution or are you in the planning phase for a NAC solution. Endpoint security is my main concern for our 2008 budget.
TIA,

Jason