Security Solutions

3-58
Designing Access Controls
Choose the Endpoint Integrity Deployment Method
Table 3-41. Preliminary Decisions for the Endpoint Integrity Deployment Method
For PCU, the network administrators’ earlier reality checks have served them
well: all zones support the selected methods.
In summary, the PCU zones will deploy their NAC 800s with the endpoint
integrity deployment methods shown below.
Table 3-42. Deployment Method by Zone
Factor Weight Private Wired Public Wired Private
Wireless
Public
Wireless
Remote
Selected access
control method
1 802.1X DHCP 802.1X DHCP n/a
Security 2 802.1X Inline 802.1X Inline Inline
Existing network
infrastructure
4 802.1X DHCP 802.1X DHCP Inline
Connection type 3 n/a n/a n/a n/a Inline
Total 802.1X DHCP 802.1X DHCP Inline
Zone Deployment Method
Private wired 802.1X
Public wired DHCP
Private wireless 802.1X
Public wireless DHCP
Remote Inline