Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 21 / 534

Introduction 21
no
vd
ocx
(e
n)
24
Ma
rch 20
09
The trade-offs in the test methods are described in the following table:
Table 1-2
Test Methods
The following list highlights key features:
Š
Enforcement options — Novell ZENworks Network Access Control provides multiple
enforcement options for quarantining endpoints that do not comply with your security policy
(Inline, DHCP, and 802.1X). This enables Novell ZENworks Network Access Control to
enforce compliance across complex, heterogeneous networks.
Š
High availability and load balancing — A multi-server Novell ZENworks Network Access
Control deployment is mutually supporting. Should one server fail, other nodes within a cluster
will automatically provide coverage for the affected network segment.
Test method
Trade-offs
Pros Cons
Agentless
Š
Truly agentless, no install or
download.
Š
No extra memory load on the client
machine.
Š
Can begin testing, view test results,
and give network access without any
end-user interaction for endpoints on
your Windows domains.
Š
Easiest of the three test methods to
deploy.
Š
Saves administration time and is
therefore less expensive than
agent-based solutions.
Š
Requires RPC Service to be
available to the Novell ZENworks
Network Access Control server
(ports 139 or 445).
Š
Requires file and print sharing to be
enabled.
Š
Not supported by legacy Windows TM
operating systems and non-Windows
operating systems.
Š
If the endpoint is not on a domain,
the user must specify local
credentials. A user often does not
know what credentials to enter.
ActiveX plug-in
Š
No installation or upgrade to
maintain.
Š
Supports all Windows operating
systems.
Š
Only Internet Explorer application
access required through personal
firewall. Must open port 1500.
Š
No retesting of endpoint once
browser is closed.
Š
Not supported by non-Windows
operating systems.
Š
Browser security settings must allow
ActiveX control operation of signed
and safe controls. This is the default
for the Internet zone. Raise the
Internet zone setting and make
Novell ZENworks Network Access
Control part of the trusted zone.
Š
Requires interaction from
end-users—they must download the
control before they can access
network.
NAC Agent
Š
Always available for retesting.
Š
The agent is automatically updated
with product updates.
Š
Supports all Windows platforms.
Š
Install and upgrade to maintain.
Š
Requires one-time interaction from
end-users—they must download and
install before they can access
network.