Keep your existing switches and Wi-Fi.
EasyNAC uses ARP-based enforcement rather than requiring switch-specific 802.1X integration for its agentless LAN approach. The compatibility guide covers managed and unmanaged switches, virtual switches and wireless infrastructure.
Match the deployment to the networks you want to protect. Check subnet visibility, wireless client paths and the connections between branches and the appliance. Optional SNMP scanning adds switch and port information; it is separate from the enforcement method.
Recognize managed devices with AD.
Active Directory integration supplies directory context for Auto Trust Policy. Select the AD joined machine check to recognize devices that meet your chosen trust rule. The compatibility guide also lists Microsoft Entra ID and WMI integration options.
Confirm the integration type, required permissions and available device information for your environment. Directory membership is one policy input; it should be used with the access outcomes and other checks your team needs.
Connect endpoint-security information.
Supported endpoint-security integrations help EasyNAC use information from tools already managing your computers. The published compatibility guide lists platforms including CrowdStrike Falcon, SentinelOne, Microsoft Defender and Cortex XDR.
Use the XDR managed machine check in Auto Trust Policy where the selected integration supports it. Check the exact platform, deployment type and connector requirements against the guide and your current release.
Use supported management integrations.
The guide includes patch, desktop and mobile management integrations, such as Microsoft Intune, Microsoft SCCM/WSUS and ManageEngine products. These provide different kinds of management and compliance information; they are not interchangeable.
Bring the product name, cloud or on-premises deployment, version and the check you want to perform to the evaluation. The downloadable matrix is version 3.2.250801, dated 1 August 2025. Confirm current-release requirements when planning a new deployment.
Choose the assessment method for the job.
Agentless integrations avoid adding a dedicated NAC agent where your existing tools can supply the required information. For local application, patch or security-software checks, the optional EasyNAC endpoint agent provides a separate assessment method.
Automated Threat Response can use configured alerts from supported security workflows. The guide describes email, syslog and API options. Confirm alert parsing, device identification and the intended restriction in a controlled test.
VPN protection has a different deployment model and agent requirements. Use its specific guide section rather than assuming a standalone LAN pilot also covers remote access.
See how EasyNAC fits your network.
Use the standalone Evaluation Kit for practical tests, a deployment checklist and an editable scorecard. Bring your network questions to the EasyNAC team.