Skip to main content

Posts

Cisco NAC Guest Server 2.0

NAC Guest Server has changed significantly with the latest 2.0 release. From External Portal Support to AD SSO, this revision has added some key enterprise features. The features that have hit home the most for myself and my customers have been: Active Directory Single Sign On Cisco NAC Guest Server 2.0 can be joined to an Active Directory Domain and then automatically authenticate Internet Explorer browsers using Integrated Windows Authentication. This removes the need for sponsors to enter their username and password. For details on configuration of ADSSO, see the Configuration of Active Directory Single Sign-On for NAC Guest Server Configuration Example Credit Card Billing Support Cisco NAC Guest Server 2.0 provides the ability for guests to purchase accounts via credit card support. This means that you can now use NGS to provide ROI for guest internet access. Management Reports Management reports are enhanced to provide the following guest network usage information: •Total Guest A...

NAC NEWS UPDATES

The following is a list of new things out there in the Cisco NAC World. The NAC Market is continuing to grow in 2009 and with the growth the products will continue to evolve, get better and have more options. Security Options Abound: New NAC Release My friends over at TechWiseTV are a huge multi-media machine, producing video, audio and podcasts. Well this PodCast is on NAC 4.5, Alok Agrawal of the NAC Business Unit and Myself dive into some of the cool features of 4.5. All of the podcasts can be subscribed to through iTunes. To access the NAC podcast go to: http://www.cisco.com/en/US/solutions/ns340/ns339/ns638/ns719/html_TW/tw_episode_198.html And to get more information on all the great stuff coming from Techwise TV visit: http://www.mytechwisetv.com/ or http://cisco.com/go/interact NAC Layer 3 Out of Band Design Guide That Uses VRF-Lite for Traffic Isolation Cisco wrote a new configuration guide on using VRF-Lite for traffic isolation. This is a great configuration option for NAC, ...

NAC Support Logs in 4.5

Many people might be wondering what happen to the handy dandy support logs that used to be located in the "/perfigo/logs/" directory in previous NAC versions. Well in version 4.5 there were some enhancements to the logging and with those enhancements came new placement of the logs. These logs are most commonly used to troubleshoot NAC during deployments. Please do not turn on advanced logging without reading the documentation fully or with the assistance of Cisco TAC. The CAM log can be found at: /perfigo/control/tomcat/logs/nac_manager.log The CAS log can be found at: /perfigo/access/tomcat/logs/nac_server.log For those of you not familiar with what the logs contain, please feel free to reference the CAM and CAS Configuration Guides: CAM Admin Guide - Support Logs CAS Admin Guide - Support Logs

NAC Version Matrix

In June of 2006, NAC Version 4.0.0 was released. Since then, Cisco has released numerous updates and features to the NAC Appliance line! Recently a member of the NAC Mailing List posted the following request: Is there a feature matrix to compare the various versions/tracks of Cisco NAC? So that is exactly what this posts answers. It is long, but I know at least one person appreciates it! I will explore 3 major lines of code.. 4.0.X, 4.1.X and 4.5.X. Realistically all new deployments should be using 4.1.X or 4.5.X, but I wanted to give a good overview for everyone on older codes. 4.0.X 4.0.0 Support for Active Directory (Windows Domain) Single Sign-On (SSO) Corporate Asset Authentication and Posture Assessment by MAC Address Support for Layer 3 Out-of-Band (OOB) Deployment New Windows Update Requirement Type SMP Kernel Support for Super CAM Support for Assigning VLANs by VLAN Name in OOB Deployments Support for "IGNORE" Global Device Filter for IP Phones in OOB Deployments Abi...

Cisco NAC Appliance 4.5 Released

The time has come.... 4.5 is here It can be downloaded here! (Require Valid Smartnet Contract) As with all NAC releases, be sure to read the RELEASE NOTES before upgrading! CAM/CAS Configuration Guides: Cisco NAC Appliance - Clean Access Manager Installation and Configuration Guide, Release 4.5 New! Cisco NAC Appliance - Clean Access Server Installation and Configuration Guide, Release 4.5 New! Bottom line is that 4.5 brings way too many features to list. That is why the release notes will help! Looks for future posts on new features and benefits!

Configuration Example - Wireless Out Of Band - New NAC 4.5 Feature

The following is a configuration guide that was posted to explain how to configure NAC 4.5 with Wireless LAN Controller 5.1 for NAC Wireless OOB support. NAC Out-Of-Band (OOB) Wireless Configuration Example Wireless OOB is a feature we all have been waiting for. Some of the great benefits that I see are: - No need for a second Clean Access Server(CAS) just for wireless. If you are a smaller organization wireless and wired can be performed on a single CAS. - Bandwidth benefits for larger wireless infrastructures. With 10Gbps network backbones and large central wireless deployments(lots of clients), having a OOB wireless deployment is a no brainer. This is one of a few great features coming out with NAC release 4.5.

Coming Soon - Cisco NAC Release 4.5

Cisco is preparing for NAC Release 4.5 which will include great features like Wireless OOB, Mac Posture Assessment Support and CAM import/export of policies. The first piece of documentation has been published: Cisco NAC Appliance Release 4.5 - Video Data Sheet Keep a lookout for posting on all the new features and when the download becomes available.