Network Access Quarantine Control Considerations

By Author: unknownmem
Total Articles: 128
Comment this article

Network Access Quarantine Control is a new feature of Windows Vista exam(http://www.mcts-70-620.com)
that can prevent access to a private network until the configuration of a remote computer has been validated. Validation is performed by comparing the remote computer against a list of required attributes provided in a script. The script is created by network administrators in compliance with a security policy. For example, administrators might want to ensure that clients have the latest service packs and hotfixes or up-to-date antivirus software before they connect to the corporate network. The process works like this:
1.A remote access computer requests a connection.
2.The user is authenticated.
3.The remote computer is assigned an IP address.
4.The connection is placed in quarantine mode, which limits network access by using IP filters.
5.The provided script is run on the RAS client computer.
6.After the script completes the notifier component on the RAS client, it notifies the listener component on the remote access server that the RAS client either met the quarantine policy or ...
... failed to meet Network+ certification(http://www.certtopper.com)
. If the client fails the policy check or the notifier does not respond within a predetermined period of time, the client will be disconnected. If the client passes the check, the quarantine IP filter will be removed.
Figure 10-17 shows the network components. The client in the figure can be Windows XP, Windows Server 2003, Windows 2000, Windows Millennium Edition, or Windows 98 Second Edition.
RADIUS provides central authentication, authorization, and accounting for the VPN. In Figure 10-17, note the following required components:
A remote client that has been provided with a Connection Manager profile created with the Windows Server 2003 Connection Manager Administration Kit. The profile contains a network policy compliance script and a notifier component.
A remote access server running Windows Server 2003 and the quarantine notification listener service.
A RADIUS server running Windows Server 2003 and Internet Authentication Service (IAS) configured with a quarantine remote access policy. The policy specifies two quarantine settings: the 70-680(http://www.upcert.com)
and the quarantine timeout setting.