integrated solution include the Security Compliance Manager client/server componentry and the Tivoli Configuration Manager remediation client/server code.

In this section we see how these components map to the implementation architecture.

Network Admission

Compliance

Remediation

Control Subsystem

Subsystem

Subsystem

Cisco

IBM

IBM

Compliance

Remediation

Trust Agent

Client

Client

 

Cisco

 

 

Network

 

 

Access

 

 

Device

 

 

 

IBM

IBM

 

Security

 

Remediation

Cisco

Compliance

Server

Server

Secure

 

 

 

Access

 

 

Control

 

 

Server

 

 

Figure 5-3 Component subsystems - total solution

5.3.1 Logical components

For the purposes and scope of this book, we operate under the premise that ABBC has the software distribution server subsystem based on the Tivoli Configuration Manager installed and configured. For detailed information about basic implementation of IBM Tivoli Configuration Manager refer to the product documentation IBM Tivoli Configuration Manager Version 4.2.3 Planning and Installation Guide, GC23-4702-03. Here we focus on extending the infrastructure

102Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Page 120
Image 120
IBM Tivoli and Cisco manual Logical components, Component subsystems total solution