Video Screencast Help

Replacement for Network Access Control;

Created: 18 Mar 2014 | 3 comments
Shwin23's picture

Hi,

Since Network Access Control is an End of life product;

What is the replacement solution in this?

One of my client is asking for 300 Symantec Endpoint Protection Licenses and NAC as an add-on;

Please advise;

Attached EOL information of NAC;

Operating Systems:

Comments 3 CommentsJump to latest comment

Rafeeq's picture

Nothing officical yet, even I could find only this, by 2017 they will come up with an alternative. are you using SNAC enforcers appliance or SNAC software version ? with software version you can still use HI, no change in that.

Will we be migrating customers to other Symantec solutions?
Moving forward, Host Integrity, a feature of Symantec Network Access Control, will be integrated into a future release of Symantec Endpoint Protection (SEP).   Customers who have SEP entitlement can continue to use the Host Integrity feature.  Those who require advanced network access control capabilities should speak to their current network device providers whose products may have already incorporated this technology.

http://www.symantec.com/business/support/index?page=content&id=HOWTO95154
James007's picture

Announcing the End of Life of Symantec Network Access Control 12.1

https://www-secure.symantec.com/connect/blogs/announcing-end-life-symantec-network-access-control-121

Symantec Network Access Control (SNAC) End of Life FAQ for Customers and Partners

 

Article:HOWTO95154  |  Created: 2014-02-03  |  Updated: 2014-03-03  |  Article URL http://www.symantec.com/docs/HOWTO95154

 

SMLatCST's picture

It kind of depends on what you're after when you mentioned SNAC.

The Host Integrity checking as the lads above mentioned is moving into SEP, so you'll still be able to check the health of your clients, and perform remediation steps/apply alternate policies in the event they fail.

What you'll lose is the network-based enforcement of different setting in the case of a HI fail.  While there are loads of products out there that already do 802.1x (replacing the LAN Enforcer), I've not found any that specifically replace the DHCP or Gateway Enforcer.

As an example, cisco offer 802.1x (http://www.cisco.com/c/en/us/products/ios-nx-os-so...)

What component of SNAC are you looking to replace?