HP Access Control Client Software manual ProCurve Access Control Solution

Addendum to the ProCurve Access Control Security Design Guide

ProCurve Access Control Solution 2.1

ProCurve Access Control Solution 2.1

The ProCurve Access Control Solution 2.1 provides adaptive edge control with endpoint integrity. It is a flexible solution that is designed to meet the needs of a variety of organizations, which can select one of the following options for deploying the solution:

■Adaptive access control with endpoint integrity—For organizations that need the highest levels of security, the complete solution provides:

•Adaptive EDGE capabilities—ProCurve intelligent EDGE devices and ProCurve Identity Driven Manager (IDM) prevent unauthorized users from accessing the network and allow you to customize network access for authorized users. ProCurve intelligent EDGE devices include:

–Switches such as the ProCurve 8212zl Switch, ProCurve Switch 5400zl Series, and ProCurve Switch 5300xl Series

–Wireless infrastructure devices such as the ProCurve Access Point 530 and ProCurve Wireless Edge Services Module. (For more information about these and other intelligent EDGE devices, visit the ProCurve Web site at http://www.pro- curve.com.)

A plug-in to ProCurve Manager Plus (PCM+), IDM dynamically applies security and performance settings based on user, device, location, time, and client system state.

You can configure the intelligent EDGE devices to enforce one of the three types of access controls outlined in Chapter 1: “Access Control Concepts” of the ProCurve Access Control Security Solution Design Guide—802.1X, MAC-authentication (MAC-Auth), or Web-authenti- cation (Web-Auth). The EDGE devices can forward each user’s login credentials to a RADIUS server, which verifies the credentials.

The ProCurve Access Control Solution allows you to use the Network

Access Controller (NAC) 800 as a RADIUS server or a third-party

RADIUS server such as:

–Microsoft Internet Authentication Service (IAS) (the RADIUS server included with Microsoft Windows Server 2003)

–Microsoft NAP Health Policy Server (the RADIUS server included with Microsoft Windows Server 2008)

–Juniper Steel-Belted Radius

–FreeRADIUS

A-4