NAC (Network Access Control)

A security solution that controls device access to networks by verifying identity and compliance with security policies before granting connectivity.

What is NAC?

Network Access Control (NAC) is a security approach that restricts network access to compliant devices and authenticated users. NAC solutions verify that devices meet security requirements before allowing them onto the network.

How NAC Works

When a device attempts to connect:

Authentication: Verify user/device identity
Assessment: Check device security posture
Authorization: Grant appropriate access level
Remediation: Isolate non-compliant devices for fixes

NAC Components

Policy Server: Defines access rules and compliance requirements
Enforcement Points: Switches, wireless controllers, firewalls
Agent/Agentless: Software for posture assessment
Remediation Server: Helps devices achieve compliance

What NAC Checks

Operating system and patch level
Antivirus status and definitions
Firewall configuration
Required security software
Device certificates
User credentials

Benefits

Prevents unauthorized access
Ensures device compliance
Provides visibility into connected devices
Enables guest network access
Supports IoT device security
Facilitates regulatory compliance