4.3. Segmentation

Segmentation is the module of OpenNAC Enterprise that allows the user to define a network segmentation and assign assets to said segments based on the preconditions defined in the system policy engine (UNAC).

• 4.3.1. Introduction
  • 4.3.1.1. What is Segmentation?
  • 4.3.1.2. Is network segmentation necessary if I already have a firewall?
  • 4.3.1.3. Segmentation Benefits
  • 4.3.1.4. Segmentation in 4 Steps
  • 4.3.1.5. Segmentation Methods
  • 4.3.1.6. Segmentation Value
• 4.3.2. Deployment Steps
• 4.3.3. Architecture
  • 4.3.3.1. Components
  • 4.3.3.2. Standard Architecture
  • 4.3.3.3. Standard Sizing
• 4.3.4. Configuration
  • 4.3.4.1. Contextualization
  • 4.3.4.2. Network device Radius permissions
  • 4.3.4.3. 802.1x Certificate configuration in ON Core
  • 4.3.4.4. Supplicant configuration
  • 4.3.4.5. Network Device Configuration
  • 4.3.4.6. Next-Generation Firewall Integration
• 4.3.5. Administration
  • 4.3.5.1. Introduction
  • 4.3.5.2. Contextualization
  • 4.3.5.3. Segmentation module
  • 4.3.5.4. Creating Network Devices in the CMDB
  • 4.3.5.5. Segmentation in UNAC policies
• 4.3.6. Operation
  • 4.3.6.1. Introduction
  • 4.3.6.2. Business Profiles
  • 4.3.6.3. CMDB - User Devices
  • 4.3.6.4. Security profiles enforcement check
• 4.3.7. Monitoring
  • 4.3.7.1. Segmentation Overview
  • 4.3.7.2. Segmentation Metrics
• 4.3.8. Troubleshooting
  • 4.3.8.1. Troubleshooting Process
  • 4.3.8.2. MAB Auth Flow
  • 4.3.8.3. Supplicant Flow