beautypg.com

IBM Tivoli and Cisco User Manual

Page 506

background image

488

Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

physical components 121
pop-up notification 277
posture plug-in 44, 51
posture status reply 59
SCM client communication 48
secure communication 63
Service 44
troubleshooting 453
violation count 58

Clean Access Agent 45, 82, 456, 478

configuration 303, 334

Clean Access Manager 45, 82, 303, 455, 478

policy 99

Clean Access Server 18, 45, 82, 303, 455, 478

compliance check 99

client network access 59
clientless hosts

configuration 300

clientless user 283
collector 18, 49, 442

antivirus configuration 163
hotfixes 169
password settings 165
personal firewall 171
posture collector 153
service pack level 167
service running 177

com.ibm.scm.nac.posture.PolicyCollector 357
com.ibm.scm.nac.tcmremed.client.TCMRemed
357
communication

flow 55
security 62

comparison

between NAC Framework and NAC Appliance
17

compliance 85

check 99
component implementation 125
concept 4
criteria 103
criteria for workstations 100
data 18
decisions 103
exception 29
management

business process 28

policy 57, 395

assigning to clients 186

configuration 152
customization 161
versioning 103

posture collector 153
query 19
report 46
requirements 96
server 34
status for workstations 97
status reports 29–30
user interface 20
violation 50

confidentiality 30
configuration

Access Control Server

authentication and authorization 241
authorization rule 280
certificate setup 219
downloadable ACL 284
for NAC L2 802.1x 214
for NAC L2/L3 IP 283
groups 237
logging 226
posture validation 244

ACLs 293
administrative interface to Access Control Serv-
er 216
antivirus collector 163
Clean Access Agent 303, 334
clientless hosts 300
compliance policy 152
hotfix collector 169
HTTP administrator access for ACS 218
NAC Appliance components 303
NAC Framework 214
network access profile 271, 289
network interface 301
out-of-band virtual gateway 306
password settings collector 165
personal firewall collector 171
policy collector 358
posture validation process 299
RADIUS Authorization Components 264, 287
RADIUS for NAC 236
remediation

client 357
packages 417
server 385
workflows 417