HP BladeSystem bc2000 Cisco Network Access Control for HP Thin Clients and CCI - Page 30

temporary access to the trusted/production network. If remediation servers are present on

Page 30 highlights

21. The Clean Access Agent test should now find the machine out of policy. The machine is either kept in quarantine LAN or temporary access can be granted to the trusted LAN (if required for remediation). For purposes of this reference implementation, we have configured a temporarily network access of 4 minutes to allow any required access to any remediation resources that may exist on the trusted network and to demonstrate the flexibility of clean access enforcement. NOTE: This is a configurable policy and there are security consequences in allowing any temporary access to the trusted/production network. If remediation servers are present on the untrusted LAN, there is no need to grant temporary access. 22. Click Continue to see more information on the missing requirements. 30

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42

30
21.
The Clean Access Agent test should now find the machine out of policy. The machine is either
kept in quarantine LAN or temporary access can be granted to the trusted LAN (if required for
remediation). For purposes of this reference implementation, we have configured a temporarily
network access of 4 minutes to allow any required access to any remediation resources that
may exist on the trusted network and to demonstrate the flexibility of clean access enforcement.
NOTE: This is a configurable policy and there are security consequences in allowing any
temporary access to the trusted/production network. If remediation servers are present on the
untrusted LAN, there is no need to grant temporary access.
22.
Click
Continue
to see more information on the missing requirements.