When NAC meets NAP

It is the rare environment that has only one vendor's product. The dream of integrated network access control (NAC) is that network managers will be able to pick and choose best-of-breed components from different vendors to make a complete solution. It's a dream that started with Cisco and Microsoft, and now rests on standards from the Trusted Computing Group. Today, most NAC solutions are interoperable with Cisco or Microsoft technology.

A very large percentage of environments have some combination of Microsoft software and Cisco network devices. This was recognized early on when Microsoft and Cisco were starting to develop their NAC solutions, and the two companies pledged to support each other's efforts. Microsoft and Cisco also promised that their products would be interoperable with the Trusted Computing Group's Trusted Network Connect (TNC) standards.

[ See the Test Center reviews of Microsoft NAP, the NAP-based Napera NAC appliance for SMBs, and NAC solutions from Enterasys, McAfee, Symantec, Trend Micro, Sophos, and ConSentry. ]

Two years ago, it seemed those pledged efforts might be mostly marketing hype, as neither delivered solutions that followed up on the agreed-upon integration. I'm happy to report that there is a moderate level of integration today, though mixing and matching components from Microsoft Network Access Protection (NAP) and Cisco Network Admission Control (Cisco NAC) to form a complete solution still has a way to go, and it is questionable if integration efforts will ever reach the level sought by users. But there is a lot you can do and a variety of ways you can juggle components.

Open industry standards