I'm researching the feasibility of implementing 802.1x port security on my wired network. The supplicants will be Windows 7 PCs. The authenticator will be Cisco and Juniper switches. I'm thinking about using PacketFence as the authentication server.
With 802.1x enabled, would it be possible to push patches out to the Windows PCs and perform security scans on them while nobody's logged in to them? My understanding about 802.1x is that the PCs will be denied network access until a user authenticates. If that's the case, then I wouldn't even be able to ping the PCs, let alone patch and scan them, right? Any agents running on the PCs also would not be able to get out on the network unless a user is logged in.
Am I understanding this correctly, or is there some way to have 802.1x and still manage the PCs remotely when a user is not logged on?