ccna 640-801

ccna 640-801.6.1.3.2 Cisco NAC FeaturesThe components of the NAC framework provide compliance-based access control. NAC works with features provided by other Cisco products (such as Cisco Secure Access Control Server, ACS) and partner products (such as Trend Micro), such as authentication, authorization and auditing, scanning, and remediation.The goal of both the NAC framework and the CiscoNAC appliance is to ensure that only authorized hosts and hosts whose security status has been checked and approved are allowed on the network. For example, a company laptop may not receive current security updates or be infected by another system while it is away from the company for a period of time, at which point it cannot connect to the company's network until it has been checked, updated, and approved.Network access devices function similarly to an enforcement layer in that they force clients to query a RADIUS server for authentication and authorization. The RADIUS server can query other devices, such as Trend's antivirus server, and reply to the network enforcer.6.1.3.3 Cisco NAC ComponentsCisco Secure Access Control products are part of the Csico TrustSec solution based on NAC devices, which is a core component of the Secure Borderless Network (SBSN) architecture. In the NAC appliance-based TrustSec approach, the Cisco NAC Manager (NAM) is a policy server that works with the Cisco NAC Server (NAS) to authenticate and evaluate users and user devices on LAN, wireless, and VPN connections. Access to the network and resources is based on user credentials, their role in the organization, and policy provisions for end devices.CiscoNAC Manager (NAM)-The policy and management center for a device-based NAC deployment environment. Cisco, NAC Manager defines role-based user access and endpoint security policies.Cisco NAC Server (NAS)-Evaluates and enforces security policy provisions in an appliance-based NAC deployment environment.Cisco NAC Agent (NAA)-An optional lightweight agent that runs on the endpoint device. It performs in-depth inspection of security profiles on the device by analyzing registry settings, services, and files.Additional TrustSec policy enforcement tools are shown below.