Currently WLAN Authentication is based on the Microsoft Active Directory computer-account. This works well and guarantees that only company own notebooks are connected to our WLAN network. We use Extreme wireless (identify) and Extreme Control (NAC Gateway + Netsight ADV).
Now we want to enhance that authentication mechanism regarding the anti-virus (update) status. Some road-warriors are not able to update the local antivirus pattern if the are on the road around the globe. We have some problems with virus polluted notebooks.
So we want to depend the successfull WLAN connection additionally with the status of the client within our enterprise antivirus solution (Kaspersky Endpoint-Security 10). Only if the client have current av patterns or the server tell us a complaint (good) state the client should be able to connect to wlan. Otherwise the client should be move over to a quarantine network which have the possibility to update and scan the client. After this process is successfull the client should move to the normal enterprise network. It was very usefull that the client get some information about the current state during the remediation process.
So i am interesseted how can i connect the NAC Gateway with Kaspersky Server - Netsight API (Fusion / OneFabic Connect). And how can i inform the client during remediation process.
Are there some experience how i can achieve this goal ? Maybe especially also with Kaspersky Endpoint Security?