Network Access Control Solution

Ferris State University is looking for a NAC (Network Access Control) solution to support and secure the campus wide wireless and wired network. The campus network consists of a wired and wireless Extreme Network. We are running the current version of edge switches and the current cloud managed wireless network. We are looking for a solution that will provide advanced network access control primarily for our wireless network, however future phases will include our wired infrastructure. We are looking to provide robust authentication for our staff, faculty, and students that utilizes their campus account and password, we want captive portal support for guest access, and we want a registration portal for our students and IT staff, to register devices in such a way as to place them in the correct security profile and VLAN. We have identified the following types of device profiles that we will look to employ. University Owned – these will be devices that will have access to our internal campus network as if they are hard wired. BYOD – devices not owned by the university or IOT (internet of things) devices that should be placed in a restricted or separate security v-lan with internet access only. The captive guest portal should be flexible enough to allow users to self-register easily for a maximum number of days and use that one registration on at least three devices. Third Party NAC solutions will be reviewed, but the desire is to have a NAC solution that is native to our wired and wireless network.