NAP technical details?

-

hi nap gurus,

i have couple of questions on nap in general , nap dhcp framework. nice if please me in answering them myself.

 

1. nps server accessible good/bad clients clients send health nps server before getting "authenticated?" mean vulnerable dos attacks?

 

2. in dhcp framework,
 enforcement client sends health information dhcp server. dhcp server forwards health information nps server. nps server sends validation message dhcp server , client. client not have ip address, how nps server know send message.

 

thank you,

divya

hello divyakolar -

 

i'll address second question first -

the health information passed dhcp server, , dhcp server communicates nps evaluation.  nps comes decision, passes decision, plus soh response package, dhcp server.  dhcp server enforcement server, , determines parameters pass client grant desired access level.  when dhcp ack passed client, includes soh response part of payload.  dhcp enforcement client relays soh response payload nap agent evaluation, results in nap state notifications (if needed), automatic remediation (if configured), etc.

 

thus, nps not directly communicate client, ever, , doesn't need client's ip.

 

this leads second question -

in cases, nap client never talks nps directly; communication through proxy (the enforcement server) - dhcp server, health registration authority (hra), vpn server, 802.1x switch or ap, etc.  layer between, 1 still exposed dos attacks.  strive, however, perform enough dos attacks difficult perform.

 

hope clarifies you!

 

-chris

chris.edson@online.microsoft.com *

sdet, network access protection

* remove "online" make address valid.

** posting provided "as is" no warranties, , confers no rights.



Windows Server  >  Network Access Protection



Comments

Post a Comment

Popular posts from this blog

List Styles

-
in word 2010, defined new list style called “custom1′ “new docs based on template” instead of “this doc only.” heading 1, 2, 3, etc. appear linked within document. document create list style called “custom2′ , choose make available “new docs based on template” , also link them heading styles. though both list styles show available new docs, 1 of list styles (the last 1 used) linked heading styles. in word's default list library, multiple multi-level lists appear be linked heading styles. not able link heading styles multiple custom list styles? a particular list style can have 1 set of paragraph styles associated (one style each numbering level). the list formats in so-called list library behave differently, have noticed. similar predefined formats in bullets , numbering dialog box of word 97-2003. stefan blom, microsoft word mvp ...
Read more

for loop and start-job from cmd.exe

-
hello, i have simple script developed debug purposes: $serverlist = @( "sca-c1cor01", "scb-c1cor01" ) ($i=0; $i -lt $serverlist.length; $i++) { start-job -scriptblock {$x=0} } i have saved script off file called test.ps1.  when run ./test.ps1 within interactive powershell runs fine.  i trying to call script dos window, sql server agent command job, or start->run line.  here syntax using: cmd.exe /c powershell -nologo -noninteractive "c:\scripts\powershell\test.ps1" when run way (from dos window), diaglog box pops says: powershell has stopped working  problem caused program stop working correctly.  windows close program , notify if solution available. i close , open eventvwr.msc.  2 pieces of info.  1 application , services log (windows powershell): engine state changed available stopped. details:  newenginestate=stopped  previousenginestate...
Read more

The Windows Management Instrumentation (WMI) service cannot be started . Failed

-
i started trubleshoting microsoft windows [version 10.0.10586] (c) 2015 microsoft corporation. rights reserved. c:\windows\system32>regsvr32 [/u] [/s] <ocx file name> syntax of command incorrect. c:\windows\system32>run /n regsvr32 /s msmapi32.ocx 'run' not recognized internal or external command, operable program or batch file. c:\windows\system32>cmd /k sc qc winmgmt [sc] queryserviceconfig success service_name: winmgmt         type               : 20  win32_share_process         start_type         : 2   auto_start         error_control      : 0   ignore         binary_path_name   : c:\windows\system32\svchost.exe -k netsvcs...
Read more