What is our primary use case?
macmon helps us to know who is in our network. We can be sure that only authorized devices are part of our network. In different areas in the past, it was always so much work to be sure that there were no unknown components in our network. With macmon, we can prevent our network easily from unauthorized access. We now always have good knowledge of who is active in our network. The network components are from different vendors and with macmon we did not have to change all the components to get a restrictive network access policy. We also now can be sure that the network devices are compliant.
How has it helped my organization?
Many things have become easier. We have constant insight into which components are active in our network. Automatically, devices are put to the right VLANs, and guests get vouchers for their devices – even if they need LAN-Access.
We can be sure that nobody forgets to block the ports once the guests are gone. The reporting is excellent and we are always informed if someone without permission has tried to get into our network.
We don't have to spend much time with macmon. We can give some parts of administration to office personal, for example, giving out vouchers.
What is most valuable?
With Macon you are not forced to change your switch infrastructure, macmon handles a variety of vendors. You can also decide where you want which type of authentification. You can use Mac authentification, you can use 802.ix, or stick the Mac address into a special type of operating system. It depends on the personal security level you want to implement.
macmon is able to communicate with a great variety of third-party products. There is communication between macmon and your firewall, as well as with other security solutions.
The API is a great way to get information from other tools.
What needs improvement?
The service macmon offers is already great. The support is really good, and, if you need some new features, you can always discuss this with the development team. If the feature is something the world needs, they will try to do it.
macmon is going in the right direction. They started with network access and combined it with compliance. At the moment, macmon offers a new solution, called SPD, which refers to Zero Trust. This must be the way for the future. Network access control combined with Zero Trust for remote workers will be great. That way, everyone who works from outside the company can be authorized by several authentication factors.
For how long have I used the solution?
I've used the solution for several years - likely around 5 or 6.
What do I think about the stability of the solution?
The stability is good. The new versions are stable and the macmon team always working on performance improvements. You can get support from macmon or macmon partners if you run into issues.
What do I think about the scalability of the solution?
The scalability is very good. You can use macmon in small environments but you can also use it as an enterprise company with locations all over the world.
How are customer service and technical support?
The support is great. If you need help they are with you in a short amount of time. You can directly talk with someone. You don´t have to do everything by mail.
Which solution did I use previously and why did I switch?
We used a different solution called Arp Guard. We switched because the solution did not fit the standard of a network access solution. There was an old-fashioned look to the product as well and the support was poor. It always took a long time to get answers. At that time, there was no real documentation.
We never regretted our decision to switch because the road map was and is much more impressive with macmon than by the other vendor.
How was the initial setup?
macmon was easy to set up. We used a virtual appliance and did it step by step. There is a guideline, however, we did it with help from a macmon partner
What about the implementation team?
What was our ROI?
It is difficult to estimate what would have happened without the security improvements by macmon. It's likely we saved several thousand euros over the years. Also, the manpower saved since implementing macmon has been invaluable.
What's my experience with pricing, setup cost, and licensing?
The best way to come to a decision is a proof of concept. Try the solution and have a look at how you can work with it. The pricing is important, however, you should also think about saving time in implementing and working with the solution. In the end, the benefits you get will outweigh the costs.
Licensing by macmon is easy. You have network nodes and server hardware or a virtual appliance or you can go in the direction of server scalability. My commitment is directly to start with a virtual appliance.
Which other solutions did I evaluate?
We made an evaluation of other options. First, we tried Microsoft tools – however, that was much too difficult. When we started with macmon we had immediate success. We could see our network and see the devices and could easily go online. The VLAN Management was quick to implement and we had no problems with our network devices or with the switch components.
What other advice do I have?
I'd advise new users to just try it. Don't be afraid. Network access control can be implemented in a few days. Later on, the handling is easy. You must not be afraid to have more work than before. The solution helps you to save time and money.
Which deployment model are you using for this solution?
On-premises
