Symantec Network Access Control [EOL] Reviews

The most valuable feature was the 802.1x support (port base control). Also, we used to host integrity policy, and it was really useful. We could control almost all the properties of the clien. Host integrity policy feature is part of the SEP antivirus, but if you use with NAC it is the best solution.

We are an IT security department, and we are facing a lot of security controls and pentests because of regulations. This solution improved our security values, and made it easy to perform security checks.

Symantec and their partner attempted to deploy Symantec Network Control Enforcer 6100 appliances and using 802.1X. At that time many of the devices on the network were not compatible with 802.1X and deployment was stopped. We moved to Symantec DHCP Enforcer software on our Domain controllers. The DHCP enforcer works in tandem with Symantec Endpoint Protection's "host integrity" services for NAC. Worked well for Windows clients - no so much for MacOS, iOS and Android devices. DHCP NAC enforcement has been deprecated. We have stopped NAC in our environment.

We are relying on domain authentication and NPS for access to our production networks today. I'm now managing Apple products with CasperSuite MDM from JAMF Software

It's not improved the organizations functions.

Symantec Network Access Control comes with a suite of Symantec Endpoint Protection. You can think of any secured method of access control, and SNAC provides it in a better way. Basically, it provides 802.1x enforced access control, DHCP enforced access control, and gateway enforced access control. If you have a multi-layered VLAN structure on your network, then SNAC is the best choice because any of these three types of access control can be enforced with SNAC. In a domain based environment, you can also enforce various desktop policies through it. It has its own firewall architecture which can help you control the access methods of your network in a better way. SNAC also provides MAC based authentication features.

Because Symantec Network Access Control comes as a part of Symantec Endpoint Security, it is a little complicated to install. If you have a bundled software package for your corporate network, then you might call the technical support engineer to help you. Online documentation is not sufficient for this product if you are going to install it on your own. The price for the product is also high.