NAC agent base vs agent less

Userlevel 2

what is the advantages of agent-based over agent-less in NAC? or vice versa.



3 replies

Userlevel 2
Hi, Marlon

We are currently running the software based agent for detecting and internal computer applications as initial security level, it is the best option for validation of desktop computers in jobs.

In sporadic time a scan is performed with Nessus to detect occasional vulnerability to a specific group of users.

Mario Pardo
Userlevel 6
Hi Marlon.

agent based can detect what processes are running, what is on harddrive, what is the setting in registry. Agent less can detect if the application is vulnerable or not.

each approach does have benefits :)

if the client does have strict firewall then agent less scan will not tell you much, and still the client can be very old and full of unwanted software.