Network Access Control

The Canadian Light Source (CLS) operates a diverse network that includes managed computers, scientific instruments, building control systems, and devices used by visiting researchers. Currently, any device can connect to the network without authentication or authorization, creating potential security risks. To address this, CLS plans to implement a Network Access Control (NAC) solution that will authenticate and authorize all devices before granting network access, enforce security policies, segment network traffic, and provide real-time visibility of connected devices. This initiative supports CLS's broader cybersecurity strategy and compliance requirements. The document outlines the technical, functional, and operational requirements for the NAC solution and serves as a guide for its selection, deployment, management, and implementation.