CMDashCybersecurity Maturity Dashboard

← All landscape areas

Network Security · Core

Network Access Control (NAC)

Controls device admission and posture on networks.

7 options listedTypical cost: $10k-$150k/yrPROTECT (PR)

Overview

NAC authenticates and posture-checks devices before granting LAN/WLAN access and enforces segmentation by role. It underpins zero-trust for campus and is heavily used in OT/IoT-rich environments. Licensing is per concurrent endpoint or device. Deployment complexity is the dominant cost driver.

Controls device admission/posture; important for larger or OT/IoT-mixed networks.

Advantages

Cisco ISE deep for Cisco shops
Forescout agentless with strong OT/IoT visibility
enforces posture and role-based segmentation
PacketFence free.

Trade-offs

Notoriously complex, long deployments
ISE licensing tiers confusing
misconfiguration can break legitimate access.

Vendors & tools in this area

Cisco ISECommercial

Deep NAC/identity services for Cisco-centric networks.

Aruba ClearPassCommercial

NAC for multi-vendor wired/wireless networks.

ForescoutCommercial

Agentless device visibility + NAC; strong OT/IoT.

Fortinet FortiNACCommercial

NAC within the Fortinet Security Fabric.

PacketFenceOpen source

Open-source NAC.

PortnoxCommercial

Cloud-native, agentless NAC — no on-prem appliance required.

ThreatLocker Network ControlCommercial

Agent-based Zero Trust Network Access, sold as part of ThreatLocker's broader endpoint security suite.

Start free trial Browse the full atlas

Network Access Control (NAC) — Cybersecurity Landscape Atlas — CMDash