• Embed Doc
  • Copy Link
  • Readcast
  • Collections
  • CommentGo Back
Download
 
Introduction to Network Access Protection
Microsoft CorporationPublished: June 2004Updated: February 2008 
Abstract
Network Access Protection (NAP) is one of the most desired and highly anticipated features of Microsoft®Windows Server® 2008. NAP is a new platform and solution that controls access to network resources based ona client computer’s identity and compliance with corporate governance policy. NAP allows network administratorsto define granular levels of network access based on who a client is, the groups to which the client belongs, andthe degree to which that client is compliant with corporate governance policy. If a client is not compliant, NAPprovides a mechanism to automatically bring the client back into compliance and then dynamically increase itslevel of network access. NAP includes an application programming interface (API) for developers and vendors tocreate complete solutions for health state validation, limitation of network access or communication, and ongoingcompliance. This paper describes the scenarios for NAP, the components of NAP, and how NAP works for theenforcement methods included with Windows Server 2008, Windows Vista™, and Windows® XPService Pack3.
 
Microsoft 
® 
Windows Server 
® 
White Paper 
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of  publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.This White Paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.Complying with all applicable copyright laws is the responsibility of theuser. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without theexpress written permission of Microsoft Corporation.Microsoft may have patents, patent applications, trademarks, copyrights,or other intellectual property rights covering subject matter in thisdocument. Except as expressly provided in any written licenseagreement from Microsoft, the furnishing of this document does not giveyou any license to these patents, trademarks, copyrights, or other intellectual property.© 2008 Microsoft Corporation. All rights reserved.Microsoft, Active Directory, Windows Vista, Windows, and WindowsServer 
 
are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are property of their respective owners.
 
Microsoft 
® 
Windows Server 
® 
White Paper 
Contents
Contents ........................................................................................................................................3Introduction ...................................................................................................................................1
Aspects of NAP ...........................................................................................................................1Scenarios for NAP .......................................................................................................................2
Components of NAP .....................................................................................................................4
System Health Agents and System Health Validators .................................................................4Enforcement Components and Methods .....................................................................................4IPsec Enforcement...................................................................................................................4802.1X Enforcement................................................................................................................5VPN Enforcement....................................................................................................................5DHCP Enforcement.................................................................................................................6NPS .............................................................................................................................................6Remediation Servers ...................................................................................................................6
How NAP Works ............................................................................................................................7
How IPsec Enforcement Works ...................................................................................................8How 802.1X Enforcement Works ................................................................................................9How VPN Enforcement Works ..................................................................................................10How DHCP Enforcement Works ................................................................................................10
Summary ......................................................................................................................................12Related Links ...............................................................................................................................13
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
You must be to leave a comment.
Submit
Characters: ...