Network Access Control

Question 1

What is NAC used for?

Answer 1

It’s used to inspect devices to see if they are safe before allowing them to connect to the network.

Question 2

What happens if the device fails the inspection?

Answer 2

The device is put into a digital quarantine where it can patch and update anything that isn’t deemed secure/safe.

In the quarantine the device can not communicate with the network until it passes the check.

Question 3

What is difference between a Persistent and Non-Persistent NAC agent?

Answer 3

Persistent agents are installed on the device that wants to connect to the network. This is common on company owned devices.

Non-Persistent is software that sans the device remotely or installs itself on the device, performs the scan, and then uninstalls itself after. This is common in public area’s such as universities.

Question 4

Can NAC be, both a hardware or software solution?

On what IEEE standard is NAC built on top of?

Answer 4

Yes

IEEE 802.1x