We are currently in the middle of implementing a BYOD policy. Our major opponent is that currently, anyone can hit a site we host publicly and download an cisco VPN software, install it, and with their RSA token + Username/Password use this non-company laptop to access our network.
We currently run a Cisco ASA 5510 for our VPN and RSA as our authentication.
Is there a way using the Cisco ASA 5510 that we can ahead of time have our users by email register their computers with us (Mac Address, secure certificat, etc. yes I know mac's can be spoofed) and we can enter them into configs to only allow connections from said physical addresses or some other identifier.
We can do this via software or ASA configs. Pretty much open to any suggestions at this time.