Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any project to include NAC support in to Linux?. My main aim is to accept-deny access to other network on a Linux Firewall afte awking for operating system NAC agents for client's health. For example, If the client has no anvitivüs installed, this linux will block client's traffic. Normally switches has such capabilities. Is it possible on Linux? Regards,

share|improve this question
are the clients running windows or linux or??? – Mike Pennington Oct 20 '11 at 21:08
mostly windows. – seaquest Oct 22 '11 at 18:46

It sounds like you are looking for packetfence... it runs under Linux...

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful guest management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.

You need to use packetfence + nessus (nessus wikipedia article) to enforce anti-virus policy

share|improve this answer
How can it check the all antivirus signatures are installed on the client? AFAIK, there is a protocol to talk with end user agents for checking. Does packetfence supports it? – seaquest Oct 22 '11 at 7:18
There's not one protocol for that communication: each NAC system has its own. You probably need an agent on the clients, or an application with credentials on those clients, to test AV levels. – Bill Weiss Jun 5 '12 at 14:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.