CANAC - Implementing Cisco NAC Appliance

Summary

The NAC Appliance (Cisco Clean Access) is a “shrink-wrapped” network admission control solution that recognizes users, their devices and roles, evaluates the security posture of the endpoint and scans for vulnerabilities, and enforces policy in the network. In particular, prior to allowing users onto the network, the NAC Appliance solution allows administrators to authenticate, authorize, interrogate, and remediate users and their machines, enforcing policy based access control on the network. We recommend CCNA Security, CCSP, BSMCN, SNRS, and BSCI as prerequisites to this course. Students should also be familiar with the Microsoft Windows operating system, networking and security terminology and concepts, and implementation of network security.

Prerequisites

Suggested:

• CCNA Security (IINS)
• Certification as a CCSP or the equivalent knowledge
• Basic knowledge of the Microsoft Windows operating system
• Familiarity with networking and security terminology and concepts
• Fundamental knowledge of implementing network security or CCSP or Cisco
• Security Cisco Qualified Specialist
• BCMSN or working knowledge of VLANs
• SNRS or working knowledge of digital certificates
• BCSI or working knowledge of HSRP

Audience

Technicians requiring CCSP Certification or NAC Specialist Certification.
Technicians using or designing networks with Cisco NAC products

Skills Taught

Upon successful completion of this course, the student will be able to:

• Given client network security requirements, explain how a NAC Appliance deployment scenario will meet or exceed those expectations
• Configure the common elements of a NAC Appliance solution
• Configure Active Directory Single Sign-On (AD SSO)
• Configure VPN Single Sign-On using an ASA/PIX
• Configure the NAC Appliance in-band and out-of-band implementation options
• Implement the NAM and NAS High Availability to protect against downtime
• Configure Network Scanning to audit clients and clientless hosts
• Monitor, maintain, and troubleshoot a NAC solution

Course Outline

Cisco NAC Endpoint Security Solutions
Cisco NAC Appliance Common Elements Configuration
Cisco NAC Appliance Implementation
Cisco NAC Appliance Implementation Options
Cisco NAC Appliance Monitoring and Administration