We currently run a Cisco ASA 5510 and a RSA token to authenticate users to our network for VPN access. The company is trying to start BYOD but would like to make sure that the PC has been approved by corporate before hitting our network. This is not something that is currently in place as anyone with an RSA token and Username/Password can install the cisco connect software on any PC they own and VPN in.
We currently employ AD in our network, RSA, and the ASA5510 is the device serving the VPN connection.
TL:DR, We would like to be able to effectively identify a users PC before allowing that PC (if its not authorized) to hit our network via VPN.