Implementing Advanced Authentication and Access Control in Cisco SDA Network

Abstract

A large public sector organization is migrating to a software-defined networking architecture to achieve greater scalability, improved user mobility, simplified maintenance, intelligent monitoring, and granular access control through modern network automation methods. Prior to migrating from a traditional network architecture, the network environment must be thoroughly mapped, which requires accurately identifying and profiling all connected endpoint devices. The goal will be to deploy general and specialized methods for acquiring device attributes to support custom and pre-defined profiler policies, enabling more precise identification of previously unknown conventional and non-conventional endpoint devices. Since all tests and required configuration changes will be performed in a production environment, the chosen approach must be carefully researched and properly implemented to prevent any disruption to network performance or authorized access. Profiling tests were conducted in accordance with a tailored profiling plan, and the results provided sufficient insight to accurately identify the challenges associated with deploying error-free device probing in the target network environment. Before pursuing a broader probe deployment or more advanced probing methods, it would be strongly advised to address all issues revealed by the tests.