NAC agent base vs agent less

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
hello,

what is the advantages of agent-based over agent-less in NAC? or vice versa.

thanks!

Marlon
Photo of Marlon

Marlon

  • 1,570 Points 1k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Pala, Zdenek

Pala, Zdenek, Employee

  • 9,080 Points 5k badge 2x thumb
Hi Marlon.

agent based can detect what processes are running, what is on harddrive, what is the setting in registry. Agent less can detect if the application is vulnerable or not.

each approach does have benefits :)

if the client does have strict firewall then agent less scan will not tell you much, and still the client can be very old and full of unwanted software.
Photo of Mario Pardo

Mario Pardo

  • 92 Points 75 badge 2x thumb
Hi, Marlon

We are currently running the software based agent for detecting and internal computer applications as initial security level, it is the best option for validation of desktop computers in jobs.

In sporadic time a scan is performed with Nessus to detect occasional vulnerability to a specific group of users.

Regards.
Mario Pardo
Photo of Marlon

Marlon

  • 1,570 Points 1k badge 2x thumb
Thanks!!!