Designing Access Controls

Choose Endpoint Integrity Testing Methods

If PCU network administrators were concerned about the small surges when classes begin and at the beginning of the school year, they might choose the agentless method. However, the PCU network has been designed to handle these surges. Based solely on the network’s capability to handle overhead, the PCU network administrators choose either the NAC EI agent or ActiveX testing method.

Table 3-52. Testing Method by Network Overhead

Factor

Public Wired

Private Wired

Public Wireless

Private

Remote

 

 

 

 

Wireless

 

 

 

 

 

 

 

Network overhead

NAC EI agent

NAC EI agent

NAC EI agent

NAC EI agent

NAC EI agent

 

ActiveX

ActiveX

ActiveX

ActiveX

ActiveX

 

 

 

 

 

 

Bringing All of the Factors Together

As with choosing the access control method, you create a table that shows all of the preliminary decisions. You can then determine which choice or choices are best when you balance all factors.

Remember, however, that your choices are less hard and fast than many in this guide; you can choose more than one method. Therefore, instead of entering a single method in each cell in the “Total” row, you should total the number of times you selected the method. Then, in the “Selection” row, record the method or methods desirable enough to devote time to implementing.

Table 3-53. Preliminary Decisions for Testing Methods

Factor

Public Wired

Private Wired

Public

Private

Remote

 

 

 

Wireless

Wireless

 

 

 

 

 

 

 

Administrative control

 

 

 

 

 

 

 

 

 

 

 

Post-connect testing

 

 

 

 

 

 

 

 

 

 

 

User sophistication

 

 

 

 

 

 

 

 

 

 

 

Administrative workload

 

 

 

 

 

 

 

 

 

 

 

Network overhead

 

 

 

 

 

 

 

 

 

 

 

Totals

 

 

 

 

 

 

 

 

 

 

 

Selections

 

 

 

 

 

 

 

 

 

 

 

3-76