Enterasys-networks 9034385 Manual do Utilizador Página 68

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
  • Página
    / 98
  • Índice
  • MARCADORES
  • Avaliado. / 5. Com base em avaliações de clientes
Vista de página 67
Procedures for Out-of-Band and Inline NAC
5-4 Design Procedures
Figure 5-2 NAC Configuration
Authentication
TheAuthenticationsettingsdefinehowRADIUSrequestsarehandledforauthenticatingend
systems(thisdoesnotapplytoLayer3NACControllers.)Thisincludesidentifying whetherMAC
authenticationrequestsareproxiedupstreamorlocallyauthorized,andwhetherFilterIDand
TunnelRADIUSattributesareaddedtoRADIUSmessagesduringtheauthentication
process.
Assessment
TheAssessmentConfigurationdefinesthefollowingrequirementsforendsystemassessment:
•Whatassessmentteststorun.
TheAssessmentConfigurationdetermineswhattypesofassessmenttestsareexecutedand
whatparametersareused.Forexample,youcanspecifyaNessusassessmentutilizinga
specificNessusconfigurationfilethatdeterminesendsystemcompliancewith
theSANSTop
20vulnerabilities.ThesameNessusservercanbeusedtoassessWindowsmachinesfor
WindowsrelatedvulnerabilitiesandalsoassessMACOSbasedmachinesforMACrelated
vulnerabilities.Inaddition,youcanspecifyNessusaswellasotherassessmentservicesto
jointlydeterminethesecuritypostureof
aconnectingdevice.
•Whatresourcestousetoruntheassessment.
TheAssessmentConfigurationdetermineswhatassessmentserversareusedtoperformthe
assessment.Youcanbalancetheassessmentloadbetweenallyourassessmentservers,oryou
canselectaspecificassessmentserverpooltouse.Forexample,assumingNessusischosen
for
assessment,endsystemsconnectingtothenetworkinthecompanyʹsheadquarterscanbe
assessedwiththeNessusserverdeployedintheheadquarters,whileendsystemsinabranch
officewillbeassessedwithNessusserversdeployedinthebranchoffice,conserving
bandwidthutilizationonthenetwork.
Vista de página 67
1 2 ... 63 64 65 66 67 68 69 70 71 72 73 ... 97 98

Comentários a estes Manuais

Sem comentários