Genian NAC is a Network Access Control solution that enforces access decisions at the moment of device connection by evaluating device identity, security posture, and access context in real time. Network Surveillance: Genian NAC uses a non-disruptive Layer 2-based Network Sensor to monitor IP-enabled devices in real time, classifying devices and users into logical groups. It detects rogue, unknown, and misconfigured devices, and identifies anomalous network traffic such as ARP spoofing, MAC/IP cloning, and port scanning. Device Platform Intelligence (DPI): DPI provides detailed device identity information including manufacturer, device name, model, and OS, integrated with the Common Platform Enumeration (CPE) dictionary. It surfaces CVE vulnerability data, product end-of-life (EOL) and end-of-support (EOS) status, and manufacturer business risk signals. DPI data can be shared via the Genians Cloud. Access Control: Genian NAC supports multi-layered enforcement including 802.1x (built-in RADIUS server), DHCP enforcement (built-in DHCP server), Layer 2 ARP enforcement, Layer 3 TCP reset, and inline enforcement via a dual-homed gateway. It uses over 500 predefined conditions for condition-based device grouping and dynamic policy assignment. BYOD / Guest Onboarding: A Captive Web Portal handles secure onboarding for BYOD, mobile, and guest devices. User authentication is supported via Active Directory, local database, RDBMS, and Google G-Suite. SAML login is also supported. IP Address Management (IPAM): Provides IP address visibility through an intuitive IP matrix interface, tracking DHCP-assigned and available addresses. Switch Port & WLAN Management: Manages connected devices per switch port and secures SSIDs and wireless access points. Endpoint & Compliance Management: Supports desktop configuration management to control installed hardware and software, and maps to CIS Controls for compliance tracking.