Can this done?

[Simcfc73]

hi Guys,

 

I am looking at setting up a W2008 server to run as a Access Control server and wondered if anyone has experience of setting one up.

 

Currently our boarders have access to the internet through our network on an evening, I don't Vlan them (I know I am slack) so what I fancy doing is creating a server so act as a NAC server.

 

When they ask for a DHCP lease it realises its a boarders computer and then only allows them through the proxt to the internet and not to anything else on the network.

 

I was going to look at just using reservations in DHCP but decided against it.

 

I fancy gettign something like this up and running then looking at locking it down more.

 

I did look at the Sophos version but couldn;t get my head round it.

 

ta muchly

[ZeroHour]

No I dont *think* it will do what you want tbh. I think it only checks security requirements and does not actually act as a firewall.

What you could do possibly is put a ISA server between the kiddies network and your main one and force kids to sign on using vpn to ISA. ISA can then control what servers/ports they use.

[Simcfc73]

I was hoping that the facility to redirect computers that don't hit a baseline I set to a quarantine area would allow me to direct them to the internet

[PcDude]

I did look at the Sophos version but couldn;t get my head round it.

 

Have you seen:

 

Understanding NAC

[SYNACK]

This could be a good watch if you have not seen it before:

 

itidiots.com - Episode 68: Windows 2008 Network Access Protection