Network Access Control For Dummies®

4.2. Dealing with Clients

An endpoint client is a component typically responsible for collecting information from the endpoint and forwarding it to the policy engine for verification and validation.

4.2.1. Client functions

An endpoint client needs to be able to collect user and endpoint information from the connecting user and endpoint.

4.2.1.1. Collect posture

If endpoint identity is one of the most valuable bits of information that you need to collect, an endpoint client can do that collection efficiently and correctly. Every endpoint is different, so you need to have the flexibility to collect the information that you need to make decisions. You should also look for open standard support for endpoint integrity collection so that if something isn't in your current NAC solution, you can find another company that supports the standards and leverage the integration, or in very rare situations, write or develop something yourself.

When collecting posture, don't limit it to a single check. Configure the endpoint agent to continually monitor the endpoint for changes.

4.2.1.2. Collect user credentials

Identity is a critical aspect of network access control, and the endpoint agent typically collects this information. An endpoint agent can collect several kinds of authentication, such as

• User names and passwords

• User names and passcodes (two-factor authentication)

• Certificates

The endpoint ...