Sophos Mobile NAC support

To support Network Access Control (NAC), Sophos Mobile manages the network access status of mobile devices based on compliance rules. When a device violates a compliance rule that is assigned to it, the network access status of the device is set to Deny. If required, you can set the status of certain devices to a fixed value, independent of their compliance status.

Sophos Mobile only manages the network access status of devices. It does not actually restrict network communication. Instead, Sophos Mobile offers a web service interface that delivers the MAC addresses and corresponding network access status of the managed devices. Third-party NAC systems can retrieve this information to permit or deny access to network segments.

The connection of the NAC system to the web service interface has to be implemented by the third-party vendor.