Unknown network devices

What happens when an “unknown” connects to the network?

  • Devices which are not in the NAC database, are ‘unknown’
  • These will be denied access, or switched to a specific lan, depending on your policy

How do you notice an ‘unknown’? You get an email alert, or a support call from the affected user. An automated email alert looks like this:

Email alert example

Explanation: A new device has been connected to the network (port 2/40 switch sw0303), but not authorised.

  • it was in room 3.16
  • on sable socket X 03.013 (this is the name written on the socket in the wall)
  • in this room the users Schenker, Wyler and Berger have their offices
  • The user TGDSCED1 has been documented as using this cable

 

What needs to be done to grant access?

  • Start the NAC gui, find the device, assign a Vlan, change the status to enabled.
  • Then either restart the port or ask the End-User to unplug/replug the network cable.