WINDOWS 2008 Network Access Protection

1. •Layered Infrastructure
•Policy based
•Open to third parties
•Denied network access/Quarantine
•Remediation
•NAP clients

2. Private
Network
Unhealthy
computer
Healthy computer

3. Accessing the network
X
Remediation
Server
NPS
HRA
Client
No Policy
Authentication Optional
Authentication
Required

4. Client
System Health Agent (SHA)
Quarantine Agent (QA)
Enforcement Client (EC)
Services
Remediation Server
Network Access Device and Server
System Health Server
Network Policy Server (NPS)
Quarantine Server (RADIUS)
System Health Validator (SHV)
Client SHV
NPS
Remediation
Network Access Device or Server
(RADIUS)
(SHV)

5. According to
policy, the client is
not up to date.
Quarantine client,
request it to
update.
Should this client be
restricted based
on its health?
Requesting access.
Here’s my new
health status.
MS NPSClient
802.1x
Switch
Remediation
Servers
May I have access?
Here’s my current
health status.
Ongoing policy
updates to Network
Policy Server
You are given
restricted access
until fix-up.
Can I have
updates?
Here you go.
Restricted Network
Client is granted access to
full intranet.
System Health
Servers
According to
policy, the client is
up to date.
Grant access.

7. •Nap client available for XP sp2
•Cisco Network Admission Control (NAC)
•Avenda Linux NAP Agent

9. Features
 Authentication Methods PEAPv0 (EAP-MSCHAPv2)
 PEAPv0 (EAP-TLS)
 Health Check Firewall Status - Check for firewall status, with auto-remediation
 Service Status - Check for different services. Auto-remediate by starting or stopping services.
 Firewall Ports - Check status of open or blocked TCP/UDP ports
 Anti-Virus Status - Check if anti-virus software is up-to-date
 Supported Platforms;
Redhat Enterprise Linux 4 and above
CentOS 5 and above
Fedora Core 6 and above
Avenda Linux NAP SHV for Microsoft NPS Features
 Health Check Firewall Status - Check for firewall status and open/blocked ports.
Auto Remediation - Turn on firewall; block or open ports.
 Service Status - Check status of different services running on the system.
Auto Remediation - Start or stop services.
 Anti-Virus Status - Check if anti-virus is running.
Auto Remediation - Start anti-virus.

10. Features
 Authentication Methods PEAPv0 (EAP-MSCHAPv2)
 PEAPv0 (EAP-TLS)
 Health Check Firewall Status - Check for firewall status, with auto-remediation
 Service Status - Check for different services. Auto-remediate by starting or stopping services.
 Firewall Ports - Check status of open or blocked TCP/UDP ports
 Anti-Virus Status - Check if anti-virus software is up-to-date
 Supported Platforms;
Redhat Enterprise Linux 4 and above
CentOS 5 and above
Fedora Core 6 and above
Avenda Linux NAP SHV for Microsoft NPS Features
 Health Check Firewall Status - Check for firewall status and open/blocked ports.
Auto Remediation - Turn on firewall; block or open ports.
 Service Status - Check status of different services running on the system.
Auto Remediation - Start or stop services.
 Anti-Virus Status - Check if anti-virus is running.
Auto Remediation - Start anti-virus.