HP PROCURVE 2910AL, Access Security Manual

Page: 48 / 594

Security Overview
ProCurve Identity-Driven Manager (IDM)
ProCurve Identity-Driven Manager
(IDM)
IDM is a plug-in to ProCurve Manager Plus (PCM+) and uses RADIUS-based
technologies to create a user-centric approach to network access
management and network activity tracking and monitoring. IDM enables
control of access security policy from a central management server, with
policy enforcement to the network edge, and protection against both external
and internal threats.
Using IDM, a system administrator can configure automatic and dynamic
security to operate at the network edge when a user connects to the network.
This operation enables the network to:
■ approve or deny access at the edge of the network instead of in the core;
■
distinguish among different users and what each is authorized to do;
■ configure guest access without compromising internal security.
Criteria for enforcing RADIUS-based security for IDM applications includes
classifiers such as:
■ authorized user identity
■ authorized device identity (MAC address)
■
software running on the device
■ physical location in the network
■ time of day
Responses can be configured to support the networking requirements, user
(SNMP) community, service needs, and access security level for a given client
and device.
For more information on IDM, go to the ProCurve Web site at
www.procurve.com/solutions
, click on
Security
, and then click
Security Products
.
1-22