IBM Tivoli and Cisco manual Solution design

5

Chapter 5. Solution design

In this chapter we describe the business objectives that drive the functional requirements of the technical solution.

As a best practice, it is typical in a production environment to deploy a new technology, such as compliance-based Network Admission Control, in phases, aiming first at the selected test locations or user groups and then extending the project to the whole network. In addition, in a real-world scenario it is always necessary to first test any new technology in a dedicated test and development network before deployment to the production environment. This document assumes that all such test lab practices are transparently in place, so we discuss only the fictional production environment.

There are essentially three parts of this deployment scenario. In this chapter we explore how the functional requirements drive our project design.

Part 1, “Architecture and design” on page 1, is dedicated to the Security Compliance infrastructure, including server and client setup as well as policy creation and assignment. The detailed technical implementation of Part 1, “Architecture and design” on page 1, is described in Chapter 6, “Compliance subsystem implementation” on page 125.

Part 2, “Customer environment” on page 75, primarily involves adding posture compliance-based Network Admission Control components (servers and enforcement points) to the existing infrastructure. The detailed technical

© Copyright IBM Corp. 2005, 2007. All rights reserved. 93