Fundamentals of Network Admission Control (NAC)

Lesson 1 • The NAC Ecosystem Overview

Maps the major components that form a NAC solution. Students understand how each component interacts before studying them individually.

Lesson 2 • Core NAC Concepts and Terminology

Introduces vocabulary used throughout the course. Precise terminology enables accurate communication with vendors and peers.

Lesson 3 • What NAC Is and Why It Matters

Defines NAC and its role in enterprise security posture. Connects endpoint trust to network access decisions.

Lesson 1 • Network Segmentation Strategies

Introduces segmentation as the enforcement outcome of NAC decisions. Students map segmentation designs to security and operational requirements.

Lesson 2 • Ethernet and Switching Fundamentals

Reviews how switches forward frames and manage VLANs. This knowledge underpins port-based NAC enforcement.

Lesson 3 • IP Addressing and Routing Essentials

Covers subnetting and routing concepts relevant to NAC VLAN assignments. Students trace traffic paths through enforcement boundaries.

Lesson 4 • Wireless Networking and NAC

Explains how wireless access points and controllers enforce NAC policies. Wi-Fi introduces unique challenges compared to wired enforcement.

Lesson 1 • Identity Stores and Directory Services

Explains how NAC queries user and device identity sources. Directory integration is the foundation of user-based policy enforcement.

Lesson 2 • Guest and Sponsor Authentication Flows

Addresses authentication for users without corporate credentials. Students design self-registration and sponsor-approval workflows.

Lesson 3 • Certificate Infrastructure for NAC

Explains how PKI supports machine and user certificate authentication. Students design certificate enrolment and trust chain requirements.

Lesson 4 • Authentication Protocols and Methods

Covers the protocols NAC uses to verify identity before granting access. Students compare methods by security strength and deployment complexity.

Lesson 1 • Remediation Workflows and Automation

Describes how NAC guides non-compliant endpoints toward compliance. Automated remediation reduces helpdesk burden and speeds recovery.

Lesson 2 • Agentless Posture Techniques

Explores methods for assessing endpoints without installed software. Agentless approaches extend NAC to unmanaged and IoT devices.

Lesson 3 • Posture Assessment Fundamentals

Defines posture assessment and its role in conditional access decisions. Students distinguish posture from authentication as separate policy inputs.

Lesson 4 • Posture Policy Design

Guides students through building posture requirement sets for different device classes. Policy design balances security requirements with operational impact.

Lesson 1 • Policy Testing and Simulation

Covers methods for validating policy logic before production deployment. Testing prevents unintended access grants or denials.

Lesson 2 • Authorization Profiles and Permissions

Defines the access outcomes NAC assigns to matched policy rules. Students configure VLAN, ACL, and downloadable policy assignments.

Lesson 3 • Policy Framework and Rule Structure

Introduces the logical structure of NAC policy engines. Students understand how conditions and results combine to produce access decisions.

Lesson 4 • Device Profiling and Classification

Explains how NAC identifies device types to apply appropriate policies. Profiling enables policy differentiation without user intervention.

Lesson 1 • Wireless NAC Deployment

Covers NAC integration with wireless LAN controllers and access points. Students configure SSID-level policy enforcement and dynamic VLAN assignment.

Lesson 2 • VPN and Remote Access NAC

Extends NAC enforcement to remote endpoints connecting via VPN. Students configure posture assessment for pre-tunnel and post-tunnel scenarios.

Lesson 3 • High Availability and Scalability Design

Addresses NAC infrastructure resilience and capacity planning. Students design redundant deployments that survive component failures.

Lesson 4 • Wired Campus NAC Deployment

Guides configuration of 802.1X and MAB on campus switches. Students apply enforcement at access layer ports across a multi-building campus.

Lesson 1 • Real-Time Monitoring and Dashboards

Covers live visibility tools built into NAC platforms. Students interpret dashboards to detect anomalies and track endpoint compliance.

Lesson 2 • Troubleshooting Posture and Policy Issues

Addresses mismatches between expected and applied policy outcomes. Students isolate posture check failures and incorrect rule matches.

Lesson 3 • Troubleshooting Authentication Failures

Provides a structured methodology for diagnosing 802.1X and RADIUS failures. Students trace failures from the supplicant through the policy server.

Lesson 4 • NAC Logging and Audit Trails

Explains what NAC systems log and how to configure log retention. Audit trails support compliance reporting and incident investigation.

Lesson 1 • NAC Programme Maturity and Roadmap Planning

Guides students in assessing current NAC maturity and planning improvements. A structured roadmap ensures continuous programme advancement.

Lesson 2 • Zero Trust Architecture and NAC

Positions NAC within a Zero Trust security model. Students map NAC capabilities to Zero Trust principles of continuous verification.

Lesson 3 • NAC Governance and Policy Lifecycle

Establishes processes for maintaining NAC policy accuracy over time. Students build governance frameworks that align NAC with organisational change.

Lesson 4 • IoT and OT Device Management via NAC

Addresses the unique challenges of admitting non-standard devices. Students design profiling and segmentation strategies for IoT and OT environments.