Enterasys Networks 9034385 manual Getting Help, Support@enterasys.com

Page 10

Getting Help

•Enterasys NAC Manager Online Help. Explains how to use NAC Manager to configure your NAC appliances, and to put in place authentication and assessment requirements for the end‐ systems accessing your network.

•Installing the Assessment Agent on the Lockdown Enforcer Appliance. Provides instructions for installing the Enterasys Networks Assessment Agent on the Lockdown Enforcer appliance (or another Linux system). The Assessment Agent is required for communication between the NAC appliance and the Lockdown Enforcer appliance.

•Installing the Assessment Agent on the Nessus Server. Provides instructions for installing the Enterasys Networks Assessment Agent on the Nessus server. The Assessment Agent is required for communication between the NAC appliance and the Nessus server.

Getting Help

For additional support related to NAC products or this document, contact Enterasys Networks using one of the following methods:

World Wide Web	www.enterasys.com/support

Phone	1-800-872-8440 (toll-free in U.S. and Canada)
	or 1-978-684-1000
	To find the Enterasys Networks Support toll-free number in your country:
	www.enterasys.com/support

Internet mail	support@enterasys.com
	To expedite your message, type [NetSight] in the subject line.

To send comments concerning this document to the Technical Publications Department: techpubs@enterasys.com

Please include the document Part Number in your email message.

Before contacting Enterasys Networks for technical support, have the following data ready:

•Your Enterasys Networks service contract number

•A description of the failure

•A description of any action(s) already taken to resolve the problem (for example, changing mode switches or rebooting the unit)

•The serial and revision numbers of all involved Enterasys Networks products in the network

•A description of your network environment (such as layout, cable type, other relevant environmental information)

•Network load and frame size at the time of trouble (if known)

•The device history (for example, if you have returned the device before, or if this is a recurring problem)

•Any previous Return Material Authorization (RMA) numbers

viii About This Guide

Image 10

Contents Enterasys Page Page Page Contents Use Scenarios Design ProceduresDesign Planning Figures TablesPage Intended Audience Related DocumentsGetting Help Support@enterasys.comKey Functionality NAC Solution OverviewAuthentication DetectionAssessment AuthorizationDeployment Models RemediationModel 3 End-System Authorization with Assessment Model 2 End-System AuthorizationModel 1 End-system Detection and Tracking NAC Solution Components NAC ApplianceNAC Gateway Appliance NAC Controller ApplianceNAC Controller is available in two models Appliance Comparison NAC Gateway NAC ControllerDisadvantage Advantage NetSight Management NetSight NAC ManagerRadius Server SummaryAssessment Server Summary Summary Overview Implementation Model 1 End-System Detection and TrackingOut-of-Band NAC Inline NAC Layer Features and ValueEnd-System and User Tracking Model 2 End-System Authorization Required and Optional ComponentsInline NAC Location-Based Authorization Device-Based AuthorizationUser-Based Authorization MAC RegistrationComponent Requirements for Authorization Model 3 End-System Authorization with Assessment Inline NAC Extensive Security Posture Compliance Verification Diverse Security Posture Compliance Verification Component Requirements for Authorization with Assessment Implementation Self-Service Remediation Required and Optional Components Enterasys NAC Deployment Models Value Scenario 1 Intelligent Wired Access Edge Use ScenariosPolicy-Enabled Edge NAC FunctionsRFC 3580 Capable Edge VLAN=ProductionScenario 1 Implementation Scenario 2 Intelligent Wireless Access Edge Thin Wireless EdgeRemediation Web User Laptop Thick Wireless Edge Scenario 2 Implementation Scenario 3 Non-intelligent Access Edge Wired and Wireless Layer 2 Wired LAN Scenario 4 VPN Remote Access Scenario 3 ImplementationVPN Remote Access Enterasys Scenario 4 ImplementationUse Scenario Summaries Summary and Appliance Requirements VPN remote access Design Planning Identify the NAC Deployment ModelSurvey the Network Identify the Intelligent Edge of the NetworkNetwork with Intelligent Edge Evaluate Policy/VLAN and Authentication Configuration Case #1 No authentication method is deployed on the networkCase #2 Authentication methods are deployed on the network Overview of Supported Authentication MethodsEnd-System Capabilities Support of Multiple Authentication MethodsSupport for Multiple End-System Connection Authentication Support on Enterasys Devices Authentication ConsiderationsIdentify the Strategic Point for End-System Authorization Thick Wireless Deployments Wired LANWireless LAN Identify Network Connection MethodsThin Wireless Deployments Remote Access WANSite-to-Site VPN Remote Access VPN Identify Inline or Out-of-band NAC DeploymentSummary Procedures for Out-of-Band and Inline NAC Identify Required NetSight ApplicationsDefine Network Security Domains NAC Configurations Security DomainNAC Configuration Authorization NAC Configuration for a Security Domain Procedures for Out-of-Band and Inline NAC To the network Procedures for Out-of-Band and Inline NAC Procedures for Out-of-Band and Inline NAC Security Domain Configuration Guidelines for Assessment Identify Required MAC and User Overrides MAC OverridesMAC and User Override Configuration Procedures for Out-of-Band and Inline NAC Procedures for Out-of-Band and Inline NAC User Overrides Assessment Design Procedures Determine the Number of Assessment ServersIdentify Assessment Server Configuration Determine Assessment Server LocationOut-of-Band NAC Design Procedures Identify Network Authentication ConfigurationDetermine the Number of NAC Gateways NAC Gateway Redundancy Determine NAC Gateway Location Identify Backend Radius Server Interaction Determine End-System Mobility RestrictionsPolicy Role Configuration Vlan ConfigurationDefine NAC Access Policies Failsafe Policy and Accept Policy Configuration Assessment Policy and Quarantine Policy ConfigurationPolicy Role Configuration in NetSight Policy Manager Assessment PolicyService for the Assessing Role Quarantine PolicyDetermine NAC Controller Location Inline NAC Design ProceduresUnregistered Policy Inline NAC Design Procedures Determine the Number of NAC Controllers Layer 2 NAC Controller Redundancy Define Policy Configuration NAC Deployment With an Intrusion Detection System IDS Additional ConsiderationsNAC Deployment With NetSight ASM Additional Considerations Design Procedures