Designing Access Controls
Choose Endpoint Integrity Testing Methods
If PCU network administrators were concerned about the small surges when classes begin and at the beginning of the school year, they might choose the agentless method. However, the PCU network has been designed to handle these surges. Based solely on the network’s capability to handle overhead, the PCU network administrators choose either the NAC EI agent or ActiveX testing method.
Table 3-52. Testing Method by Network Overhead
Factor | Public Wired | Private Wired | Public Wireless | Private | Remote |
|
|
|
| Wireless |
|
|
|
|
|
|
|
Network overhead | NAC EI agent | NAC EI agent | NAC EI agent | NAC EI agent | NAC EI agent |
| ActiveX | ActiveX | ActiveX | ActiveX | ActiveX |
|
|
|
|
|
|
Bringing All of the Factors Together
As with choosing the access control method, you create a table that shows all of the preliminary decisions. You can then determine which choice or choices are best when you balance all factors.
Remember, however, that your choices are less hard and fast than many in this guide; you can choose more than one method. Therefore, instead of entering a single method in each cell in the “Total” row, you should total the number of times you selected the method. Then, in the “Selection” row, record the method or methods desirable enough to devote time to implementing.
Table 3-53. Preliminary Decisions for Testing Methods
Factor | Public Wired | Private Wired | Public | Private | Remote |
|
|
| Wireless | Wireless |
|
|
|
|
|
|
|
Administrative control |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
|
User sophistication |
|
|
|
|
|
|
|
|
|
|
|
Administrative workload |
|
|
|
|
|
|
|
|
|
|
|
Network overhead |
|
|
|
|
|
|
|
|
|
|
|
Totals |
|
|
|
|
|
|
|
|
|
|
|
Selections |
|
|
|
|
|
|
|
|
|
|
|