beautypg.com

IBM Tivoli and Cisco User Manual

Page 122

background image

104

Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Establishing the policy collector parameters

At this point, we have to establish the posture policy version because this has a
direct bearing on how the network access control permissions will be set.
Figure 5-4 shows a logical view of the Tivoli Security Compliance Manager client
components.

Figure 5-4 Tivoli Security Compliance Manager client components

The

policy collector

gathers data from the posture collectors and passes it to the

posture plug-in, after which it is forwarded to the Cisco components for the
access decision. See “Compliance client” on page 48 for more about these client
components.

Tip: Other terms used to describe the unique nature of the policy collector
include

management collector

,

meta-collector

, and

hypervisor

.

SCM Client

Posture

Cache

Posture

Collector

Posture

Collector

Posture

Collector

Policy Collector

Posture

Plug-in

SCM

Policy

Cisco

Components