3.1.3. ON NAC

The OpenNAC Enterprise module named ON NAC mainly manages NAC (Network Access Control), policies (visibility, profiling, access), and its configuration.

Before performing any configuration tasks, it is important to understand the terminology related to the OpenNAC Enterprise module and its corresponding concepts, representing levels of configuration and customization:

• Business Profiles: It allows the creation, review, and search for information over the business profiles (Policy Groups). Business profiles allow grouping policies, tags, or EPT following different criteria, which can be technical or business events.

• Policies: The main engine of OpenNAC Enterprise, policies allow defining the behavior of OpenNAC, from the control of devices’ access to their visibility.

• Tag Policies In this section you can generate policies based on tags so that they are assigned dynamically. This provides flexibility to create tags based on logical syntax as AND, OR, NOT.

• Profiling: It allows defining different parameters to evaluate every single asset discovered by OpenNAC Enterprise. Based on this evaluation OpenNAC inserts a tag on an asset and the user can generate a policy for validating or filtering the assets that match with it. The main objective is the classification by endpoint type (EPT).

• 3.1.3.1. Business Profiles
  • 3.1.3.1.1. Business Profiles Configuration
  • 3.1.3.1.2. Default Business Profiles
    • 3.1.3.1.2.1. EPT view
    • 3.1.3.1.2.2. Default view
    • 3.1.3.1.2.3. Locations view
• 3.1.3.2. Policies
  • 3.1.3.2.1. Filters
  • 3.1.3.2.2. Contextual menu
  • 3.1.3.2.3. Add new policy
    • 3.1.3.2.3.1. General
    • 3.1.3.2.3.2. Preconditions
      • 3.1.3.2.3.2.1. Time
      • 3.1.3.2.3.2.2. Session
      • 3.1.3.2.3.2.3. Users
      • 3.1.3.2.3.2.4. User Devices
      • 3.1.3.2.3.2.5. Network Devices
      • 3.1.3.2.3.2.6. Sources
    • 3.1.3.2.3.3. Postconditions
    • 3.1.3.2.3.4. Other
• 3.1.3.3. Tag Policies
  • 3.1.3.3.1. UD Tag Policies
  • 3.1.3.3.2. UD Tag Application Requirements
  • 3.1.3.3.3. ND Tag Policies
  • 3.1.3.3.4. Compliance Gap Remediation
• 3.1.3.4. Profiling
  • 3.1.3.4.1. User device profiling
  • 3.1.3.4.2. Column Types