IBM Tivoli and Cisco manual NAC Framework components, 479

NAC Framework components

The NAC Framework provides the following technology support:

￿Broad network device support for campus LANs, WANs, VPNs, and wireless access points

￿Ties to third-party host assessment tools for unmanned, agentless, and other nonresponsive devices, and is able to apply a different policy to each device

￿Broad platform support for the Cisco Trust Agent

￿Extends multivendor integration, with application and operating system status checks that go far beyond antivirus and basic operating system patches

The NAC Framework is supported by the following technologies:

￿Cisco routers:

–Cisco 83x, 18xx, 28xx, and 38xx series integrated services routers

–1701, 1711, 1712, 1721, 1751, 1751-V, and 1760 modular access routers

–2600XM, 2691, 3640, and 3660-ENT multiservice access routers

–72xx Series routers

￿Cisco switches:

–Cisco Catalyst 6500 Series Supervisor Engine 2, 32, and 720, with Cisco Catalyst OS, Cisco IOS Software, or hybrid applications (Cisco IOS Software support on Supervisor Engine 32 and 720)

–Cisco Catalyst 4000 Series Supervisor Engine II+, II+TS, IV, V, and V-10GE, with Cisco IOS Software

–Cisco Catalyst 4948 and 4948-10GE

–Cisco Catalyst 3550, 3560, and 3750, with Cisco IOS IP base and IP services

–Cisco Catalyst 2940, 2950, 2955, 2960, 2970

￿Cisco wireless access: Cisco Aironet access points, Cisco Aironet lightweight access points connected to a Cisco Wireless LAN Controller, the Cisco Catalyst 6500 Series Wireless LAN Services Module (WLSM), and all Cisco Aironet, Cisco Compatible, and Wi-Fi client devices with an IEEE 802.1X supplicant that supports NAC

￿Cisco VPN 3000 Series concentrators

￿Cisco Trust Agent

￿Cisco Secure Access Control Server (ACS)

￿Third-party vendor software

Appendix B. Network Admission Control 479