Community discussions

MikroTik App
 
marcelofares
Member Candidate
Member Candidate
Topic Author
Posts: 130
Joined: Tue Mar 03, 2015 2:26 pm

Nac or Nap Solution ?

Sat Sep 05, 2015 5:49 pm

Hello, I have a doubt.

I can deploy protocol called Network Access Control (NAC) or Network Address Protection (NAP) in conjunction with my Mikrotik?

I would like to do this to verify that the client computer has the security updates before you log on my network. This is a way to ensure security before providing client access by checking the minimum requirements on the client computer.

This is possible with the Mikrotik?

Best,
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Mon Sep 07, 2015 8:59 am

No. There is no such feature.
 
marrold
Member
Member
Posts: 427
Joined: Wed Sep 04, 2013 10:45 am

Re:

Mon Sep 07, 2015 10:23 am

No. There is no such feature.
This is a pretty broad statement. There is no built-in feature, but it may be possible to add scripts etc that make it possible.
 
marcelofares
Member Candidate
Member Candidate
Topic Author
Posts: 130
Joined: Tue Mar 03, 2015 2:26 pm

Re: Re:

Mon Sep 07, 2015 3:31 pm

No. There is no such feature.
This is a pretty broad statement. There is no built-in feature, but it may be possible to add scripts etc that make it possible.

Where can I find These scripts to add.

Any suggestion? I searched for it on the internet and did not find anything.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: Nac or Nap Solution ?

Mon Sep 07, 2015 5:35 pm

Scripts? How can you check by scripts running in ROS what is the situation of patch level of the users operating system, whether he has installed, updated and running trusted antivirus and firewall, or other things about the client before you approve his connection to the network?
I do not see any possibility for it.
 
marrold
Member
Member
Posts: 427
Joined: Wed Sep 04, 2013 10:45 am

Re: Nac or Nap Solution ?

Mon Sep 07, 2015 6:18 pm

Some kind of hack of Radius / 802.1x / user manager / LDAP / AD.

It would need scripts on both the PC and the Router, and probably else where.

It wouldn't be easy, but Im sure its achievable with the correct knowledge.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: Nac or Nap Solution ?

Tue Sep 08, 2015 4:29 pm

This is correct. But it is not possible within the ros only not even by any scripts.

Who is online

Users browsing this forum: No registered users and 42 guests