Establishing the policy collector parameters

At this point, we have to establish the posture policy version because this has a direct bearing on how the network access control permissions will be set. Figure 5-4shows a logical view of the Tivoli Security Compliance Manager client components.

 

SCM Client

 

 

 

Posture

 

 

 

Collector

 

 

Posture

Posture

SCM

 

Policy

 

Cache

Collector

 

 

 

 

Posture

 

 

 

Collector

 

Cisco

Policy Collector

 

Components

 

 

Posture

 

 

 

Plug-in

 

 

Figure 5-4 Tivoli Security Compliance Manager client components

The policy collector gathers data from the posture collectors and passes it to the posture plug-in, after which it is forwarded to the Cisco components for the access decision. See “Compliance client” on page 48 for more about these client components.

Tip: Other terms used to describe the unique nature of the policy collector

include management collector, meta-collector, and hypervisor.

104Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Page 122
Image 122
IBM Tivoli and Cisco Establishing the policy collector parameters, Tivoli Security Compliance Manager client components