home > information technology > services & support > networking services > nac

Network Access Control (NAC) Implementation

In Spring of 2008 we will be implementing a new Network Access Control solution, Cisco Clean Access. This will replace the current network registration process. Our current system has served us very well but it lacks the sophistication needed to keep pace with today's network security requirements.

Network access control is an essential process to allow access to network resources and ensure that the Marist network is always available to its users and remains stable regardless of what new virus or worm may be roaming around the Internet. During a time where other campus networks were brought down by Slammer, Sasser, Nimda, and other such worms and viruses, the Marist campus network remained fully operational. In order to keep up with this track record, our institution must evolve with the technology. Marist uses network access control to protect confidential data, prevent identity theft and protect Marist resources. By ensuring that your computer has the latest virus protection and is free of viruses and worms before allowing it on the Marist network, we can maintain a stable environment for the Marist Community.

We are making some great advances in the network access control process with the migration to this new product. Most notable to the community will be the wait time to register a machine on the network. With our current system, this may take up to 15 minutes before gaining access to the network. If your computer is in compliance with our security policies, this should now only take a few seconds. Also, there will no longer be the need for faculty and staff to pre-register their MAC address in order to gain network access. Lastly, the Cisco solution uses an agent (software application installed on your PC) to ensure your computer has all the latest security patches and virus definitions before joining the network.

The agent has one job - ensure that your computer is safe to join the network. It does this by checking for two requirements: Does your computer have the latest Operating System patches and the most recent virus protection system. The new program runs continuously. Why? Because virus protection files are quickly out of date as new viruses and worms are created and spread on the Internet. This application will warn you when this occurs and ask you to update your virus definition files or operating system patches before allowing you back on the network. This protects you and everyone else that uses the Marist network. This agent uses minimal resources and will not affect the performance of your computer.

The installation of the new Network Access Control (NAC) solution will occur on a phased basis during March and April as outlined in the schedule below. To advise users of the part they will play in the installation process, IT staff will be conducting briefing sessions for faculty and staff.