ccna 640-461 pdf

ccna 640-461 pdf.6.1.3 Endpoint Security Using Network Access Control6.1.3.1 Cisco Network Admission ControlCisco Network Admission Control (NAC) II has two no's: allowing only authorized and compliant systems (whether managed or unmanaged) to access the network, and enforcing network security policies. NAC maintains network stability by providing four important features: authentication and authorization, stateful testing (using network policy to evaluate incoming devices), isolation of non-compliant systems, and correction of non-compliant systems. Cisco NAC products fall into two main categories.NAC Framework - The NAC Framework enables the existing Cisco network infrastructure and third-party software to enforce security policies on all endpoints. The NAC framework is suitable for high-performing network environments with multiple endpoints. These environments require. Consistent solutions for LAN, WAN, wireless, extranet, and remote access that are integrated into existing security, complementary software, tools, and processes. Different devices in the network (not necessarily . 4 features of NAC that can be provided by individual devices).Cisco NAC Appliance - As part of the Cisco TrustSec solution, the Cisco NAC Appliance solution reduces the 4 NAC features to. The Cisco NAC Appliance solution reduces the 4 NAC features to . A complete solution (turnkeysolution) to control network access. This solution is perfect for medium-sized networks that need a standalone, off-the-shelf solution. The CiscoNAC appliance is ideal for "organizations that need simplified and integrated OS tracking and antivirus patching and vulnerability upgrades because it does not need to be a Cisco network.With the CiscoNAC Appliance (formerly CiscoCleanAccess), the network infrastructure can be used to enforce security policies on all devices I: attempting to gain access. CiscoNAC appliances can be used to authenticate, authorize, evaluate, and remediate wired, wireless, and remote users before allowing them access to the network. CiscoNAC appliances are used to.Identify users on the network, the devices they use, and their roles; Evaluate devices for compliance with security policies; Enforce security policies by blocking, isolating, and remediating noncompliant machines: Provide simple and secure guest access.Simplify access to non-authenticated devices; Audit and report on users in the network. Cisco NAC appliances extend NAC to all network access methods, including access via LANs, remote access gateways, and wireless access points.access. It also supports stateful testing of guest users (posture assessment).