Defending Vantage's once flat, open network at the point every device first connects: a tower of eight layers a device climbs from cable-plug or wifi-join to trusted, monitored access — discovery, authentication, posture, authorization, segmentation, guest, enforcement and monitoring. On the left, the before state: only 140 of 312 ports watched, 412 unknown devices, any open jack giving full access, a guest password unchanged for 214 days and a finance zone sharing a switch with the lobby wifi. On the right, the stack's decisions: a contractor laptop with a 214-day-old patch sent to a quarantine VLAN that can reach the patch server, a personal phone given a limited role, a visitor sent through a sponsored captive portal, and a laptop whose EDR stopped mid-week quarantined by change of authorization.

CY-MID-077Mid Level · Network Access Control

Network Access Control — The NAC Defense Stack

A hands-on mid-level course that decides what may connect to the network and on what terms. Work the NAC defense stack - eight layers: Discovery, Authentication, Posture, Authorization, Segmentation, Guest, Enforcement, and Monitoring - using 802.1X, device posture, and dynamic VLANs so an unknown or unhealthy device never lands on a trusted segment. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Discover and authenticate every device that connects with 802.1X.
Check device posture and authorize the right access dynamically.
Segment by role and isolate guest and unmanaged devices.
Enforce and monitor access continuously.

Price:৳8,000