IBM Tivoli and Cisco User Manual

Building a network access control solution, With ibm tivoli and cisco systems, Front cover

Text mode
Original mode

ibm.com/redbooks

Building a Network
Access Control Solution

with IBM Tivoli and Cisco Systems

Axel Buecker

Richard Abdullah

Markus Belkin

Mike Dougherty

Wlodzimierz Dymaczewski

Vahid Mehr

Frank Yeh

Covering Cisco Network Admission
Control Framework and Appliance

Automated remediation of
noncompliant workstations

Advanced security
compliance notification

Front cover

Table of contents

Document Outline

Front cover
Contents
Notices
- Trademarks
Preface
- The team that wrote this redbook
- Become a published author
- Comments welcome
Summary of changes
- January 2007, Second Edition
Part 1 Architecture and design
Chapter 1. Business context
- 1.1 The security compliance and remediation concept
- 1.2 Why we need this
- 1.3 Does this concept help our mobile users
- 1.4 Corporate security policy defined
- 1.5 Business driver for corporate security compliance
- 1.6 Achievable benefits for being compliant
- 1.7 Conclusion
Chapter 2. Architecting the solution
- 2.1 Solution architectures, design, and methodologies
  - 2.1.1 Architecture overview
  - 2.1.2 Architectural terminology
- 2.2 Definition of a Network Admission Control project
  - 2.2.1 Phased rollout approach
- 2.3 Design process
- 2.4 Implementation flow
- 2.5 Scalability and high availability
- 2.6 Conclusion
Chapter 3. Component structure
- 3.1 Logical components
- 3.2 Physical components
- 3.3 Solution data and communication flow
  - 3.3.1 Secure communication
- 3.4 Component placement
  - 3.4.1 Security zones
  - 3.4.2 Policy enforcement points
- 3.5 Conclusion
Part 2 Customer environment
Chapter 4. Armando Banking Brothers Corporation
- 4.1 Company profile
- 4.2 Current IT architecture
- 4.3 Corporate business vision and objectives
  - 4.3.1 Project layout and implementation phases
- 4.4 Conclusion
Chapter 5. Solution design
- 5.1 Business requirements
- 5.2 Functional requirements
- 5.3 Implementation architecture
  - 5.3.1 Logical components
  - 5.3.2 Physical components
- 5.4 Conclusion
Chapter 6. Compliance subsystem implementation
- 6.1 Tivoli Security Compliance Manager setup
  - 6.1.1 Installation of DB2 database server
  - 6.1.2 Installation of Tivoli Security Compliance Manager server
- 6.2 Configuration of the compliance policies
- 6.3 Deploying the client software
  - 6.3.1 Cisco Trust Agent
  - 6.3.2 IBM Tivoli Security Compliance Manager client
- 6.4 Conclusion
Chapter 7. Network enforcement subsystem implementation
- 7.1 Configuring NAC Framework components
- 7.2 Configuring NAC Appliance components
- 7.3 Conclusion
Chapter 8. Remediation subsystem implementation
- 8.1 Automated remediation enablement
- 8.2 Remediation server software setup
- 8.3 Creating remediation instructions for the users
- 8.4 Building the remediation workflows
  - 8.4.1 Modification of the remediation packages
- 8.5 Conclusion
Part 3 Appendixes
Appendix A. Hints and tips
- Deployment overview
- Top-level sequence of events
- Security Compliance Manager and NAC compliance subsystem
- Cisco NAC sequence of events
- Fault isolation
- Security Compliance Manager server and client
  - Communication port usage
- Tools and tricks
Appendix B. Network Admission Control
- Executive summary
- The benefit of NAC
- Dramatically improve network security
- NAC implementation options
- Planning, designing, and deploying an effective NAC solution
- The next steps
- NAC technology
  - NAC Appliance components
  - NAC Framework components
Appendix C. Additional material
- Locating the Web material
- Using the Web material
  - How to use the Web material
Related publications
- IBM Redbooks
- Other publications
- Online resources
- How to get IBM Redbooks
- Help from IBM
Index
Back cover