Security Solutions

A-29
Addendum to the ProCurve Access Control Security Design Guide
Updating the Access Control Design Process
Table A-5. Options for Endpoint Integrity Solution by Interoperability
Requirements
Examples. NAP is for companies that want the complete NAP solution. PCU
is not ready to complete an extensive upgrade. It selects the NAC 800.
ProCurve, Inc. has already completed its upgrade and wants to use a Windows-
based security solution. And since the company is using primarily Windows
solutions, it does not have to worry about the non-standard EAP and VPN
extensions.
Bringing the Factors Together
As you consider each factor, you should record the decision you would make
based on that factor in a table such as Table A-6. Record the decision made
most often in the “Total” row. You should weigh factors as more or less as
important as you tally up the results. For example, the existing network
environment is often a key factor.
Table A-6. Preliminary Decisions for the Endpoint Integrity Deployment Method
Examples. PCU network administrators compiled their choices in Table A-7,
and ProCurve, Inc. network administrators compiled theirs in Table A-8.
Interoperability
Requirements
Option
Legacy and future
products
NAC 800
Windows 2008
services only
NAP
Factor Weight Selection
Existing network infrastructure
Vulnerability to risks and risk tolerance
Management resources
Interoperability requirements
Total