«

My company is Cisco shop and I'm wondering how to disable Cisco's VPN users
or home users to VPN in to corporate network if they do not have local
firewall and antivirus software installed and enabled on their machines. How
to disconnect them immediately if their machines are already infected or
compromised

We have Cisco 3000 series concentrator and PIX 525

Thanks

"John Strow" <> wrote in message
news:...
> My company is Cisco shop and I'm wondering how to disable Cisco's VPN
users
> or home users to VPN in to corporate network if they do not have local
> firewall and antivirus software installed and enabled on their machines.
How
> to disconnect them immediately if their machines are already infected or
> compromised
>
> We have Cisco 3000 series concentrator and PIX 525
>
> Thanks
>
>

Look at Cisco Trust Agent and Cisco Security Agent.

In article <>, says...
> My company is Cisco shop and I'm wondering how to disable Cisco's VPN users
> or home users to VPN in to corporate network if they do not have local
> firewall and antivirus software installed and enabled on their machines. How
> to disconnect them immediately if their machines are already infected or
> compromised
>
> We have Cisco 3000 series concentrator and PIX 525
>

Cisco put out the NAC (Network Admission Control) concept that does what
you need, BUT... in Phase 1 (NOW) supported devices are only routers and
I don't think that VPN Concentrator and PIX are supported. So, you'll
just have to wait for some time...

--
-Ivan.

*** Use Rot13 to see my eMail address ***