Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

NAC: More Is More: Page 10 of 13

The highest-rated factor is easy integration with existing infrastructure: Of the 179 people in the deployer group who expressed a preference, all said integration is either "somewhat important" or "very important." Fault tolerance, high availability and low impact on LAN performance are also critical, rated as somewhat or very important by more than 90 percent of all respondents in both groups.

Support for non-Windows OSs remains the least important selling point for a NAC system. However, just 50 percent this year rated Apple Mac support as "not important," down from 75 percent last year. Attention to Linux is also growing, with about one-third rating support "very important." Both of these OSs can be problems for architectures that rely on client-side agents, as can non-PC-based network devices such as VoIP phones and network printers.

There is also an increased demand for particular enforcement methods, though no clear favorite has emerged. Candidates are 8012.1x, VPN encryption and out-of-band technologies such as spoofing and ARP poisoning.

Working With Frameworks

With so many different NAC products, customers are demanding standards for integration with other security applications. Our survey showed a sharp increase in the number of readers who said that a NAC solution must be based on a standard. Cisco's CNAC framework is still the favorite, but as "Trusted NAC Vendors", shows, the majority of respondents to our poll don't care which one wins, just so long as a standard does eventually emerge (see "Four for Fighting" ).