Network Access Control For Dummies®

12.2. Microsoft Network Access Protection (NAP)

Microsoft developed Network Access Protection (NAP) to ensure that networks remain free of malware and any vulnerability potentially delivered and distributed by endpoint devices that have antivirus applications with outdated signature files or operating systems that haven't been updated.

Microsoft NAP controls network access based on authentication and the security and access control policy compliance of users and endpoint devices. How Microsoft NAP controls a user and endpoint device's access depends on that user's identity, and associations or group membership, as well as the device's level of policy adherence. Not only can Microsoft NAP make sure that an endpoint device is healthy enough to access an organization's network, it can also quarantine and aid in the remediation of non-compliant endpoint devices.

Microsoft utilizes a health theme with NAP; therefore, they refer to the health of a computer or other endpoint device when discussing it.

Microsoft NAP comes as part of Microsoft Windows Vista, Windows Server 2008, and Windows XP Service Pack 3. It validates the security state and general state of health for a personal computer (PC) or device that runs Microsoft Windows Vista or Windows XP Service Pack 3 (or other operating systems that have third-party Microsoft partner support) while that device attempts network connection. ...