Security Overview

ProCurve Identity-Driven Manager (IDM)

ProCurve Identity-Driven Manager (IDM)

IDM is a plug-in to ProCurve Manager Plus (PCM+) and uses RADIUS-based technologies to create a user-centric approach to network access management and network activity tracking and monitoring. IDM enables control of access security policy from a central management server, with policy enforcement to the network edge, and protection against both external and internal threats.

Using IDM, a system administrator can configure automatic and dynamic security to operate at the network edge when a user connects to the network. This operation enables the network to:

■approve or deny access at the edge of the network instead of in the core;

■distinguish among different users and what each is authorized to do;

■configure guest access without compromising internal security.

Criteria for enforcing RADIUS-based security for IDM applications includes classifiers such as:

■authorized user identity

■authorized device identity (MAC address)

■software running on the device

■physical location in the network

■time of day

Responses can be configured to support the networking requirements, user (SNMP) community, service needs, and access security level for a given client and device.

For more information on IDM, go to the ProCurve Web site at www.procurve.com/solutions, click on Security, and then click Security Products.

1-21