Cyber Sanbower

Bulletin http://www.cisco.com/en/US/products/ps6128/prod_bulletin0900aecd806f3235.html Data Sheet http://www.cisco.com/en/US/products/ps6128/products_data_sheet0900aecd806e98c9.html Q&A http://www.cisco.com/en/US/products/ps6128/products_qanda_item0900aecd806f525a.shtml Release Notes 1.0.0 http://www.cisco.com/en/US/docs/security/nac/guestserver/release_notes/10/gsrn100.html Configuration Guide 1.0.0 http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/10/nacguestserver.html

Background: Cisco NAC Profiler is an OEM software from Great Bay Software’s Beacon product( Read more ). The basis and need for NAC Profiler is to secure Non-Responsive Hosts(NRHs). This is performed by using state of the art Endpoint Profiling and Behavior Monitoring technologies. Endpoint profiling is defined as recording a network endpoint’s observable behaviors and analyzing identifiable characteristics of the endpoint in order to classify it as belonging to a particular group (Profile) and to assess each endpoint’s ability in a certain sphere. That certain sphere could be an endpoint’s ability to participate in a given authentication or Cisco NAC Appliance as an example. In essence, Endpoint Profiling is best described as behavior-based characterization of endpoints for the purpose of identifying and grouping together those that are similar in function, capability or other defining characteristics. Behavior Monitoring is the ability to ensure endpoints are behaving in a wa...

Background: BigFix ( www.bigfix.com ) is one of the many remediation software solutions available that can work with NAC for a better end user experience. BigFix can enforce that a client has the proper software, patches, and updates on a device. This sounds a bit like NAC, but the missing puzzle piece is how to enforce that bigfix is really on the connecting device and doing its job? This posting will talk about some of checks that may be created to enforce the presence and compliance of bigfix on a device connecting into the network. ***Please note that there are many ways of looking for installed/running software and it is best practice to check in two different manners(e.g. service and application check), but to keep this post more straightforward, I will only shows one of the checks. Is BigFix Installed: In order to properly assess if BigFix is installed, the following checks if the BESClient is actually there. Check Category: File Check Check Type: File Existence Check Name: BigF...

To give everyone the update, the following is the schedule for the upcoming NAC chalk talks: September 27th: Cisco NAC Profiler Introduction Prem Ananthakrishnan will introduce the Cisco NAC Profiler, which discovers, tracks, and monitors all non-PC endpoints attached to a network. By adding Profiler to a NAC deployment, customers can apply policies and access prvileges to non-PC endpoints. October 4: Secure Guest with Cisco NAC Enhance guest access with Cisco’s NAC Guest Server. Syed Ghayur will introduce the advanced provisioning and reporting features of this latest addition to the Cisco NAC product line. Access Information: Time - 10am PDT, 12pm CDT, 1pm EDT Audio - Toll-free US/Canada: 1-800-370-2618 Meeting ID: 321456# Web - Disable any pop-up blocker software http://gc46gw1.meetingplace.net Enter Meeting ID 321456

Most training courses prepare individuals for certifications, but Priveon's Real-World training is the exact opposite. Their new Cisco NAC Appliance class is focused around how to design, deploy, operate and optimize Cisco NAC. With 20 labs and a topology that mimics typical organizations' environments, the class is very impressive and valuable for everyone interested or involved with Cisco NAC Appliance! I have personally reviewed the class and I highly recommend it to anyone wanting to take their expertise to the next level. www.priveon.com Priveon NAC Appliance Training Page http://www.priveon.com/training/cisco-naca-training/priveon-real-world-naca-training.html

For those of you who missed the NAC Chalk Talk I did on Thursday, here is the link to the Video on Demand, so that you can catch some of the deployment best practices. Cisco NAC Appliance: A Success for Force 3 and Its Clients http://tools.cisco.com/cmn/jsp/index.jsp?id=65948 I also want to thank the NAC Appliance Business Unit at Cisco and specifically Prem who hosted me out in San Jose, he is the real Rock Star!

There is a new NAC chalk talk series starting next week and excitingly enough I will be the first person to present! My chalk talk will be focused around how to make your deployment more successful. This is your chance to ask me questions and get the answers live via IPTV! :) If you are unfamiliar with the NAC chalktalks, they are a great source of information about how to design, deploy, configure, troubleshoot, operate and optimize Cisco NAC Appliance. Please review the existing series by visiting the below link: View the existing NAC Chalk Talks The details of my up coming chalk talk: CISCO NAC APPLIANCE CHALK TALK SERIES 3 Kicking off SEPTEMBER 13th with a LIVE VIDEO BROADCAST featuring Jamie Sanbower from Force 3 -- Cisco NAC Appliance: A Success for Force 3 and Its Clients Watch this interactive session to learn Force 3's secret to NAC success, key deployment strategies and how they use Cisco NAC to solve their client business requirements. Date : Thursday, Se...