HP 6120G/XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 49

Security Overview ProCurve Identity-Driven Manager (IDM) ProCurve Identity-Driven Manager (IDM) IDM is a plug-in to ProCurve Manager Plus (PCM+) and uses RADIUS-based technologies to create a user-centric approach to network access management and network activity tracking and monitoring. IDM enables control of access security policy from a central management server, with policy enforcement to the network edge, and protection against both external and internal threats. Using IDM, a system administrator can configure automatic and dynamic security to operate at the network edge when a user connects to the network. This operation enables the network to: ■ approve or deny access at the edge of the network instead of in the core; ■ distinguish among different users and what each is authorized to do; ■ configure guest access without compromising internal security. Criteria for enforcing RADIUS-based security for IDM applications includes classifiers such as: ■ authorized user identity ■ authorized device identity (MAC address) ■ software running on the device ■ physical location in the network ■ time of day Responses can be configured to support the networking requirements, user (SNMP) community, service needs, and access security level for a given client and device. For more information on IDM, go to the ProCurve Web site at www.procurve.com/solutions, click on Security, and then click Security Products. 1-21