![Windows Server 2008 – Network Access Protection (NAP) Presented by Vu Nguyen Cao Son EPG Technical Specialist [email_address] www.CaoSonBlog.com](https://image.slidesharecdn.com/microsoftnapsecuritydaysonvu-1226933467265170-8/85/MS-NAP-Security-Day-1-320.jpg)
MS NAP - Security Day
- 1. Windows Server 2008 – Network Access Protection (NAP) Presented by Vu Nguyen Cao Son EPG Technical Specialist [email_address] www.CaoSonBlog.com
- 2. Why Security Introducing Network Access Protection Using NAP with DHCP Using NAP with VPN/Ipsec/802.1x Q&A Agenda
- 3. Media Personal Favor I think “it is important and essential to my system” My company have “fund” for security Why Security !!!??? – Wrong Way
- 4. Business Continuty Why Security !!!??? – Right Way Risk-based model Defense in Depth Security Control with ISO 27001 Risk Level ROI
- 5. Risk-based Decision Making Business and IT Teams “ Best Control Solution” Information Security “ Prioritize Risks” Business Owners “ What’s Important” Assess Risks Define Security Requirements Determine Acceptable Risk Design & Build Security Solutions Operate & Support Security Solutions Measure Security Solutions
- 6. Demo Examining Connection Trace Logs Examine Event Logs Examine Connection Logs demonstration Defense in Depth with Microsoft Product
- 7. Network Access Protection Benefits Enhanced Security All communications are authenticated, authorized & healthy Defense-in-depth on your terms with DHCP, VPN, IPsec, 802.1X Policy-based access that IT Pros can set and control Increased Business Value Preserves user productivity Extends existing investments in Microsoft and 3rd party infrastructure Broad industry partnership Risk Level ROI Health and Policy Validation Defense at Multiple Layers Healthy Endpoints Connect Leverage Existing Investments
- 8. Why Security Introducing Network Access Protection Using NAP with DHCP Using NAP with VPN/Ipsec/802.1x Q&A Agenda
- 9. Network Access Protection Solution Policy Validation Network Restriction Remediation Ongoing Compliance Polices, Procedures, and Awareness Data Application Host Internal Network Perimeter
- 10. NAP Architecture Overview Network Policy Server Quarantine Server (QS) Client Quarantine Agent (QA) Health policy Updates Health Statements Network Access Requests System Health Servers Remediation Servers Health Certificate Network Access Devices and Servers System Health Agent (SHA ) MS and 3rd Parties System Health Validator Enforcement Client (EC) (DHCP, IPSec, 802.1X, VPN)
- 11. How NAP Works Network Access Requests Corporate Network Restricted Network Windows Client Network Enforment Endpoint NPS Active Directory Health Statements QA SHA EC QS SHV Not Compliant Policy Compliant Remediation Servers
- 12. Why Microsoft NAP Soft-based solution, free with Windows Server 2008. Integrated into the client operating system (XP SP3, Vista) Intergrated with Core System (SCCM,FCS,WSUS) Integration with 3 rd party security products(Cisco,Juniper,Symantec, Mcafee) NAP + Domain & Server Isolation = Enforment Sec Multiple types of enforcement
- 13. Why Security Introducing Network Access Protection Using NAP with DHCP Using NAP with VPN/Ipsec/802.1x Q&A Agenda
- 14. NAP with DHCP Requesting access. Here’s my new health status. The client requests and receives updates I need to lease an IP address You are not within the Health Policy requirements Access granted. Here is your new IP address NPS Server Client DHCP Server VPN Server IEEE 802.1X Devices Remediation Servers
- 16. Configuring NAP for DHCP demonstration
- 17. Why Security Introducing Network Access Protection Using NAP with DHCP Using NAP with VPN/Ipsec/802.1x Q&A Agenda
- 18. NAP with VPN and RRAS RADIUS Messages PEAP Messages NPS Server Client VPN Server Remediation Servers
- 19. IPsec-based Communication Secure network Boundary network Restricted network IPsec Authenticated Unauthenticated
- 20. Using NAP with 802.1x Device Most Wireless Security for Enterprise with NAP Interoperation with many 802.1x Switch Network Policy Server Authentication Server 802.1x Access Points 802.1x Switch Wireless Clients Active Directory Health Requirement Server Certificate Authority (Optional)
- 21. Q&A and Thanks You www.CaoSonBlog.com