IBM Tivoli and Cisco - Manual (Page 100)

82 Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
his credentials, the Cisco Secure ACS checks its local user database and
assigns the user to the respective group. The user is then mapped to the Healthy
or Quarantine VLAN of that group, depending on the state of posture compliance
provided by the CTA on the user’s machine. All access to the network is based on
access control lists (ACLs) bound to the Layer 3 Switched Virtual Interfaces
(SVIs) on the switch, which in this example is also the access switch.
NAC Appliance
NAC Appliance is based on the Cisco Clean Access products. It comprises a
Clean Access Manager (CAM), a Clean Access Server (CAS), and a Clean
Access Agent (CAA). It is not based on an architecture approach, and can
provide NAC functionality on non-Cisco based networks. NAC Appliance can be
deployed in a variety of ways. In this example, it has been deployed as a
virtual
out-of-band
gateway.