思科网络准控制管理.ppt

* 认证方式：Cisco NAC 支持本地认证、Kerberos、LDAP、RADIUS、Active Directory、S/Ident等集成 ；支持VPN、无线客户端和AD域的SSO 打印机、传真机等设备传统使用MAC地址bypass的方式实现上网，这让有一定技术的人，可以很轻易的伪造mac地址，实现上网访问 * Transcript: All right, so next what we have is how do we compete or complement with a Microsoft NAP solution? * Transcript: In terms of the deployment options, youre already aware of the in-band and the out-of-band deployment modes. We also have the NAC RADIUS deployment mode now which is currently in beta. The beta has been running for about two to two-and-a-half months now. Its been running successfully. We are going to start limited availability so if any of you have customers that are interested in the NAC RADIUS deployment mode, definitely reach out to us and well get them added to the limited availability list. Emphasis the complexity of security, and this presentation don’t cover all aspects Transcript: Okay great. This is Tom Gillis, the VP of marketing and were going to go through and maybe start answering some of the questions. TOM GILLIS: Yes and thanks for having me up here Scott. So as we looked at the itinerary and all the content we wanted to cover, were getting absolutely deluge with product questions and so we are setting up a separate session tomorrow 7am. Were going to spend more detail on product roadmap, product directions and try to answer as many product questions as we possibly can. So I want to put in a plug for that 7am Pacific time, which is 10:00 a.m., Eastern time and probably a more comfortable time for those in Europe or probably less comfortable time for those in Asia Pacific but were trying to accommodate a wide array of time zones here. A lot of the questions we got were fairly product-specific and Ill take some of the product ones. First one here is will Project X run on existing ASA hardware. Thats absolutely the intent. Obviously we havent built it yet so were not at the point where we can say unequivocally yes but that is clearly the intent. Its meant to be just a upgr