updated some TNC scenarios
This commit is contained in:
@@ -8,16 +8,15 @@ is using the <b>IF-M 1.0</b> measurement protocol defined by <b>RFC 5792 PA-TNC<
|
||||
exchange PA-TNC attributes.
|
||||
<p>
|
||||
<b>carol</b> sends information on her operating system consisting of the PA-TNC attributes
|
||||
<em>Product Information</em>, <em>String Version</em>, <em>Numeric Version</em>,
|
||||
<em>Operational Status</em>, <em>Forwarding Enabled</em>, and
|
||||
<em>Factory Default Password Enabled</em> up-front, whereas <b>dave</b> must be prompted
|
||||
by the IMV to do so via an <em>Attribute Request</em> PA-TNC attribute. <b>carol</b> is
|
||||
then prompted to send a list of installed packages using the <em>Installed Packages</em>
|
||||
PA-TNC attribute whereas <b>dave</b>'s "Windows 1.2.3" operating system is not supported
|
||||
and thus <b>dave</b> receives a <em>Remediation Instructions</em> PA-TNC attribute.
|
||||
<em>Product Information</em>, <em>String Version</em>, and <em>Device ID</em> up-front
|
||||
to the Attestation IMV, whereas <b>dave</b> must be prompted by the IMV to do so via an
|
||||
<em>Attribute Request</em> PA-TNC attribute. <b>dave</b> is instructed to do a reference
|
||||
measurement on all files in the <b>/bin</b> directory. <b>carol</b> is then prompted to
|
||||
measure a couple of individual files and the files in the <b>/bin</b> directory as
|
||||
well as to get metadata on the <b>/etc/tnc_confg</b> configuration file.
|
||||
<p>
|
||||
<b>carol</b> passes the health test and <b>dave</b> fails. Based on these assessments
|
||||
which are communicated to the IMCs using the <em>Assessment Result</em> PA-TNC attribute,
|
||||
the clients are connected by gateway <b>moon</b> to the "rw-allow" and "rw-isolate"
|
||||
subnets, respectively.
|
||||
<b>carol</b> passes the health test and <b>dave</b> fails because IP forwarding is
|
||||
enabled. Based on these assessments which are communicated to the IMCs using the
|
||||
<em>Assessment Result</em> PA-TNC attribute, the clients are connected by gateway <b>moon</b>
|
||||
to the "rw-allow" and "rw-isolate" subnets, respectively.
|
||||
</p>
|
||||
|
||||
Reference in New Issue
Block a user