Figure 8-23. NAP client configuration window
283 Chapter 8: Network Policy and Access Services
11. Right-click DHCP Quarantine Enforcement Client, and then click Enable in the
Actions pane.
12. Close the window and restart the computer.
Testing the NAP Client
Now that everything is set, you need to verify that all your settings are working. If you
correctly followed all the steps, after rebooting your Windows Vista client computer,
you will be assigned an IP address from the DHCP server as you would normally if you
didn??™t have NAP enabled. This is because the Windows Vista client computer has the
firewall enabled by default on all network interfaces. If you open the Security Center
from the Control Panel and disable the Windows Firewall on your network interface,
within a few seconds your default gateway will be removed and you will be placed in
restricted access mode. If you double-click the NAP client message on the taskbar, you
will see the remediation message from the SHV stating that your computer is not compliant
with the requirements of the network and that you must enable a firewall program
that is compatible with the Security Center, as shown in Figure 8-24. If you re-enable the
firewall, the NAP client detects this and then renews its IP address with full unrestricted
access.
Figure 8-24. NAP client message on a noncompliant computer
284 Microsoft Windows Server 2008 Administration
CHAPTER SUMMARY
Network Access Protection is an excellent solution for providing an additional layer of
security for your network.
Pages:
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324