Network Access Control

NAC Switch Manager
every port, every host, every change

A console for the access layer. It reaches your switches over SSH, keeps a live picture of ports, VLANs, neighbours and hardware, lets operators change port and VLAN configuration behind preview, confirmation and an audit trail, and records who appeared on which port and when it changed.

All products
  • Live view of ports, rates, errors, VLANs, LLDP neighbours and MAC tables
  • Port, VLAN and configuration changes with preview, confirmation and audit
  • Access events: new host, host moved, link up or down, configuration changed
  • Events forwarded as syslog to SDefender and as tickets to SDefender Desk
NAC Switch Manager
Operating workflow

From adding a switch to a recorded change

01

Connect

Add a switch with its address and credentials. The platform is detected on connect.

02

Observe

Ports, VLANs, neighbours, MAC tables and hardware health arrive and stay current.

03

Change

Edit a port or VLAN, read the preview of what will be sent, confirm, and the change is recorded.

04

Notice

A new host, a moved host or a lost neighbour becomes an event, forwarded where it is needed.

Capabilities

What it does

Live switch telemetry

A poller keeps each switch current: port status and description, traffic rates, error counters, VLAN membership, LLDP neighbours, MAC table, power, fans, temperature, CPU, memory and logs.

Guarded configuration changes

Port and VLAN edits are shown as a preview of what will be sent, applied only after explicit confirmation, and recorded in an audit trail. Saving to startup configuration is a deliberate, separate action.

Topology that reflects reality

Neighbours, port channels and hosts seen only behind a device are drawn as one map, with several links onto the same wire folded into a single segment rather than shown as separate connections.

Host registry and access events

Every MAC learned on the access layer becomes a host that can be named and approved. A new host, a host that moved to another port or switch, and a neighbour that disappeared are each recorded as an event.

Feeds the rest of the platform

Access events leave as RFC 5424 syslog to SDefender and as tickets to SDefender Desk, so a change at the port shows up where the security team already works.

Operations built in

A multi-switch dashboard, scheduled e-mail reports, roles, sessions and HTTPS from the first install, so the console is safe to leave running.

What an operator gets

Evidence a network owner can act on

A current picture of the access layer

What is connected where, at what rate, with what errors, and which VLANs it belongs to.

A record of every change

Who changed which port or VLAN, what was sent to the switch, and when.

An access event history

Hosts appearing, moving between ports and switches, and links coming and going, exportable and available over an API.

Evidence example

Port capacity you can reclaim

NAC Switch Manager port capacity: ports in use, free and unused on every switch

Ports in use, free and idle, per switch

Every physical port on every managed switch is counted: how many carry a link, how many are enabled with nothing plugged in, and how many have been idle long enough to reclaim — per switch and by port type, exportable as CSV.

Documentation capture. Switch names are blurred.

At a glance

Specifications

CategorySwitch management and network access control
Access methodSSH to the switch, no agent on the network device
Supported platformsDell Networking OS6/9, Cisco IOS, HP Aruba, Juniper and others
Change controlPreview, confirmation and audit on every write
Access eventsLink up/down, new host, host moved, switch unreachable, configuration changed
IntegrationsSyslog to SDefender, tickets to SDefender Desk

Access control here means seeing and recording who is on the network and what changed, and handing that to the systems that act on it. Blocking a port from an incoming API is on the roadmap and is not claimed as shipped.

Coverage

Supported platforms

Dell Networking OS6Dell Networking OS9Cisco IOSHP ArubaJuniper

Dell Networking OS6 and OS9, Cisco IOS, HP Aruba and Juniper are driven over SSH and validated against real hardware, not only a simulator. The platform layer is shared, so a further switch family is added in one place — tell us which one you run.

Coverage boundary

What this does and does not do

Visibility and evidence, not enforcement

The console records and reports access changes. It does not yet block a port or quarantine a host on its own.

Supported platforms only

A switch from a platform outside the supported list can be inventoried but not managed.

Configuration depth differs by platform

Where a platform driver is read-only, the write forms for that switch are hidden rather than offered and failed.

Deployment model

Start with one switch

Connect a single switch, confirm the live picture matches the device, then widen to the access layer.

01

Connect

One switch, read-only first, to confirm the picture is right.

02

Extend

Add the rest of the access layer and name the hosts that matter.

03

Integrate

Point access events at SDefender and SDefender Desk.

04

Operate

Hand routine port and VLAN work to operators, with preview and audit in place.

Measured engagement

Plan NAC Switch Manager around your own data

Choose one product, one environment and one measurable outcome. We define success criteria before the engagement begins.