there is no different package for SNAC, the SNAC component gets installed with the SEP. Once the license is activated you can start the SNAC services and apply HI policy.

you can verify by checking the services.msc for Symantec Network Access Control

Symantec Network Access Control 12.1 RU1 MP1 Client-only patch

http://www.symantec.com/business/support/index?page=content&id=TECH187646

Thanks for the response guys,

when I go to the Fileconect website, I got confuse between the following two files:

which one should I download and install in order to get the SNAC enabled for my SEPM v 12.1 RU1 MP1 ?

You can download

is it upgrade of SEPM or fresh install?

if fresh then ru1 mp1, then you need to check the supported migration guide

SEPM --> 12.1 ru1 ---> 12.1 ru1 mp1.

also check this thread. and specific replies from Elisha

http://www.symantec.com/connect/forums/sep11-snac-11-upgrade-sep-121

Pete it was after the upgrade of the SEPM,

now as I understand is that I must keep the version of SEP client and SNAC client the same as the SEPM server, hence I create this thread to make sure which one that I need to install.

yes, :-). if everything's on SEP 12.1 RU1 then download RU1 mp1 if you are going to upgrade.

Thanks for the clarification Pete, somehow the Product description says that it is "Network Access Control Starter Edition"

Self-Enforcement is the only SNAC enforcement option that is included with SPS EE. If you want to do any other kind of enforcement (such as NAP, Gateway, or LAN) they need to license SNAC, either Starter Edition or full as appropriate.

the others will be appliance for DHCP, Gateway.

Hm... that is why I'm confused, why the latest edition of my SNAC server is just the starter edition not the proper full license as in my SNAC v 12.1 RU1 ?

I'm going to use SNAC to prevent the computer in using Wireless LAN Controller or any USB WLAN adapter while connected to the network, I guess that I'll need LAN enforcer :-|

the license for appliance is different.

You can still use the SEPM host integrity policy, however check if it meets, if not then you should be thinking of LAN enforcer or DHCP.

check the implementation guide

thanks guys !