While I am no expert on NAC I am deeply unimpressed by the whole technology. It looks like a whole bunch of trouble that is guaranteed to keep you up all night.
I see today that Lockdown Networks couldn’t get funding and are going out of business. This suggests to me that you should not go anywhere near NAC.
Lockdown Networks closes the door
If the Venture Capitalists think NAC is a bust, then the whole market space is looking like trouble.
I have looked briefly at NAC a couple of times and the software just looks very ugly. It adds layers and layers of software, wrapped around the Windows operating system. Years of experience of Windows suggest that this is not a good idea(tm).
I can accept that NAC for Windows XP might work, after all, the NAC people have have five years to work out the bugs. But with WinXP SP3 coming, and Microsoft not giving up on Vista and pushing out WinV SP1 I wouldn’t want to be looking after desktop and laptop fleet that had NAC. The NAC client software is sure to need updating.
As a network geek, it also need a lot of things to be available for it to work correctly. Indeed, it becomes a mission critical system as soon as you roll it out which is a distraction from the real business function.
Another concern as an outsider, is that the migration away from Windows to MAC and Linux looks to be gaining momentum and almost none of the NAC products work on these platforms.
NAC is an idea that has its place in ultra secure operations such as defense / military, but I don’t think it’s viable for real world applications.