We're in the early stages of students bringing in their own devices and connecting to a VMWare View infrastructure. One hiccup we are running into is locking down the guest wireless VLAN. We're aware that Cisco NAC would be the best solution to verify student owned devices are running certain antivirus programs/updates/etc (If not let me know). However, for the pilot purchasing a NAC isn't in are budget.
We have Cisco WCS as are wireless solution. Would there be a way to lock down the guest wireless VLAN so that students could just login to:
1) Login to the guest wireless VLAN
2) Use the VMWare client to connect to use view connect servers
3) Deny all other traffic
Are concerns are not in the VMWare infrastructure once they login but in the guest wireless VLAN. So students to mess with other computers in the VLAN.
I'll also mention we have a Cisco adsm 6.1, with IPS.. but I'm not sure if that will help.