Implementing NAP and NAC Security Technologies: The Complete Guide to Network Access Control

6.3. The Purpose of Cisco Clean Access

After reading this chapter, the purpose of Cisco Clean Access should be rather clear — it is a technology that helps protect the LAN from unauthorized users and devices and to control the access of devices that have a deficient security posture. From a product perspective, Cisco describes the purpose and benefits of Clean Access as follows:

• Security policy compliance — Ensures that endpoints conform to security policy; protects infrastructure and employee productivity; secures managed and unmanaged assets; supports internal environments and guest access; tailors policies to your risk level.

• Protects existing investments — Is compatible with third-party management applications; flexible deployment options minimize need for infrastructure upgrades.

• Mitigates risks from viruses, worms, and unauthorized access — Controls and reduces large-scale infrastructure disruptions; reduces OpEx and helps enable higher IT efficiency; integrates with other Cisco Self-Defending Network components to deliver comprehensive security protection.

Based upon the technical solution as it has been described in this chapter, let's compare how the solution stands up to the various types of users who may be accessing the network.

6.3.1. Unauthorized Users

A big reason why companies look at a NAC solution is to control unauthorized access to their LANs. The Clean Access solution can control this problem by ensuring that all devices accessing the LAN be authenticated and ...