A little background, we will be running PEAP with our cisco AP1200. Each AP has 3 ssid for 3 different vlans and access. Each ssid connects to a different radius server to check specific rules with active directory. Our boss now wants, when people attach to the AP, that a virus and spyware scan be performed automatically behind the scenes, and if infected it, it gets placed on a quarantine network. Most of the laptops will be student owned, so it would have to run server-side through a web browser. Is this possible? The only minor issue is that this has to be completed by the first of September. LOL

I am truly sorry for not posting useful information, but once you get this working - or if you get this working - please post back how you did this, not word for word, but this method is fairly advanced and I wouldnt, atm, know where to start about placing computers in quarantined networks...

So once you get this working, we'd be very interested in writing up and tutorial on this...

What you need is NAC this protocol is being developed by cisco to do just what you said, along with NAC you will need to make sure that the cisco app supports your av company. Currently we do this on out altigas where when you conenct via vpn we force that you have zonealarm running and your av is up to date. You cna contact a cisco rep to discuss what is needed for your set up further. Though it is real possible. NAC I believe was finally released last month or two months ago.

We are trying to mod an open source product called netpass found on sf.net and if we can't get it to work we'll also look into cisco's NAC like you mentioned. I'll keep you guys posted. Have a meeting this Tuesday about it.

J