This is a quite typical requirement. I need to find a NAC solution where I could control access of non-standard machines from joining my network physically.
We are running Windows Domain architecture in a very large organisation with multiple departments separated geographically. We have few proprietary software that clients(Windows clients) need to install and also managed anti-virus clients.
Now it is very difficult to deny network access to PCs that are complying these standards.
I've heard about CISCO NAC, which offers a client package to be installed on PCs and then it collects the information from PCs and decides whether to allow that PC in network or not.
What I am looking for is an open-source solution that could provide such kind of features. Basically we need to check client's domain information(if it has migrated to our domain or not) along-with some presence of few particular software in it. If client doesn't fulfil this criteria it should be denied access to network at all.
I've searched for the solution and found many, but none seems to be fitting as per my requirements.
If anyone could just name such solutions, it would be very helpful.