SEE FINANCE NAC HOW TO
SEE FINANCE NAC PATCH

Next, you set up an integrity profile to define what patch compliance, vulnerability assessment and intrusion-prevention protections need to be performed. As part of the connection profile setting, you define where the user authenticates. For this example, we would use the default “Any” rule, because we are looking just at access for a compliant finance group user. Profiles include out of compliance, compliance scan in progress and device scanned.

SEE FINANCE NAC HOW TO

The next step is to define the connection profile, which defines how to handle network access based on endpoint-assessment status.

Next, you would create an identity profile for the existing finance Active Directory group that associates a security policy defining the types of assessments must run against the endpoint system. To achieve this, you would create an access policy to define what network resources the finance group can have access to. Say you want employees in the finance group to access only a specific group of servers. Vernier access policies comprise a series of profiles outlined as identity, connection and integrity profiles. Policy definition allows for a lot of flexibility but can get complicated to manage quickly. The management GUI has a clean presentation overall. If an issue is identified on the endpoint, a page displays the assessment results, while a predefined message from the administrator typically provides information about how to clear up the issues at hand. The portal is a standard Web page requesting user authentication and registration information. Vernier includes a captive portal for guest users that offers similar functionality to most other products tested. For remote access and wireless access, a similar in-line deployment would work, and the company claims support for 802.1X environments as well.

In Vernier Networks’ NAC scheme, its EdgeWall appliance provides in-line assessment and enforcement functionality, while policy creation and overall management capabilities are driven by the Control Server, which sits elsewhere on network.įor testing, we deployed an EdgeWall appliance between the access and distribution layer of the test network to provide general LAN-based NAC.

See finance nac