Users Guide

Dell Networking W-ClearPass Policy Manager 6.3 | User Guide Posture | 197
Chapter 9
Posture
Policy Manager provides several posture methods to evaluate the health of the clients that request access. These
methods all return Posture Tokens (E.g., Healthy, Quarantine for use by Policy Manager for input into Enforcement
Policy. One or more posture methods can be associated with a Service.
For more information, see:
l "Posture Architecture and Flow " on page 197
l "Configuring Posture " on page 199
l "Adding a Posture Policy" on page 200
l "Adding and Modifying Posture Servers" on page 234
Posture Architecture and Flow
Policy Manager supports three types of posture checking.
Posture Policy
Policy Manager supports four pre-configured posture plugins for Windows, one plugin for Linux
®
and one plugin for
Mac OS
®
X, against which administrators can configure rules that test for specific attributes of client health and
correlate the results to return Application Posture Tokens for processing by Enforcement Policies.
Posture Server
Policy Manager can forward all or part of the posture data received from the client to a Posture Server. The Posture
Server evaluates the posture data and returns Application Posture Tokens. Policy Manager supports the Microsoft NPS
Server for Microsoft NAP integration.
Audit Server
Audit Servers provide posture checking for unmanageable devices, such as devices lacking adequate posture agents or
supplicants. In the case of such clients, the audit server’s post-audit rules map clients to roles. Policy Manager supports
two types of audit servers: The NMAP audit server, which is primarily used to derive roles from post-audit rules, and
the NESSUS audit server, primarily used for vulnerability scans (and, optionally, post-audit rules).