10 likes | 187 Views
Network Access Control. Las Vegas 2008. Windows Security Center SHA. Blue Ridge EdgeGuard SHA. Avenda Systems Universal SHA. Windows Security Center SHA. Windows Built-in Supplicant. Windows Built-in Supplicant. Windows Built-in Supplicant. Windows Built-in Supplicant. Microsoft XP SP3.
E N D
Network Access Control Las Vegas 2008 Windows Security Center SHA Blue RidgeEdgeGuard SHA Avenda SystemsUniversal SHA Windows Security Center SHA WindowsBuilt-in Supplicant WindowsBuilt-in Supplicant WindowsBuilt-in Supplicant WindowsBuilt-in Supplicant Microsoft XP SP3 Microsoft Vista Microsoft Vista Microsoft XP SP3 Avenda Systems Linux NAP SHA AvendaSystems Supplicant CentOS Linux JuniperHost Checker IMC JuniperOdysseySupplicant Microsoft XP SP2 libTNCSample IMC Open1XSupplicant Microsoft XP SP2 APs Cisco SSCSupplicant Microsoft XP SP2 Built-inSupplicant Built-inSupplicant Axis Camera802.1X/TLS Mac OS X UNIX Gigamon Net Monitor Port Monitor Cisco ACS EAP-FAST DHCP info HCAP 1 DeviceAuthentication (LDAP) Great Bay Beacon Microsoft NPS Avenda Systems Universal SHVAvenda Systems Linux NAP SHVBlue Ridge EdgeGuard SHV Windows Security Center SHV EAP-PEAP 2 DeviceDatabase Server Realm SHVoptional SHV - System Health Verifier 3 EAP/RADIUS Avenda Systems eTIPS EAP-PEAP 4 RADIUS Router(proxy) Juniper Infranet Controller EAP-PEAP Windows Security Center SHVJuniper Host Checker IMV 5 EAP-TTLS 802.1X using IF-TNCCS-SOH IMV - Integrity Measurement Verifier ActiveDirectory SHA - System Health Agent EAP/RADIUS UserAuthentication OSC Radiator Authentication Path EAP-TTLS libTNC Sample IMV CiscoEnterasysProCurveForce 10 UserDatabase 6 Enforcement by: Access Control List (ACL) VLAN Switches 7 ArubaCiscoProCurveTrapezeXirrus Network Edge 802.1X using IF-TNCCS 1.1 NAC Architectures Legend IMC - Integrity Measurement Collector ACL ACL TNC using IF-TNCCS-SOH (NAP) Unhealthy Employees TNC using IF-TNCCS 1.1 8 Enforcement Realm Data Path 802.1X without Posture Employees 802.1X Auth Only (no posture) 9 Phones / Devices 10 VLAN 20 Non-802.1X Guests Network Backbone VLAN 30 ACL ACL 11 Linksys NAS Avayaphone Client Realm Cisco NAC Appliance VLAN 40 Non-802.1X clients