updated some TNC scenarios

This commit is contained in:
Andreas Steffen
2013-07-19 19:36:07 +02:00
parent dcd5129c25
commit 645e9291f0
4 changed files with 59 additions and 18 deletions
+10 -11
View File
@@ -8,16 +8,15 @@ is using the <b>IF-M 1.0</b> measurement protocol defined by <b>RFC 5792 PA-TNC<
exchange PA-TNC attributes.
<p>
<b>carol</b> sends information on her operating system consisting of the PA-TNC attributes
<em>Product Information</em>, <em>String Version</em>, <em>Numeric Version</em>,
<em>Operational Status</em>, <em>Forwarding Enabled</em>, and
<em>Factory Default Password Enabled</em> up-front, whereas <b>dave</b> must be prompted
by the IMV to do so via an <em>Attribute Request</em> PA-TNC attribute. <b>carol</b> is
then prompted to send a list of installed packages using the <em>Installed Packages</em>
PA-TNC attribute whereas <b>dave</b>'s "Windows 1.2.3" operating system is not supported
and thus <b>dave</b> receives a <em>Remediation Instructions</em> PA-TNC attribute.
<em>Product Information</em>, <em>String Version</em>, and <em>Device ID</em> up-front
to the Attestation IMV, whereas <b>dave</b> must be prompted by the IMV to do so via an
<em>Attribute Request</em> PA-TNC attribute. <b>dave</b> is instructed to do a reference
measurement on all files in the <b>/bin</b> directory. <b>carol</b> is then prompted to
measure a couple of individual files and the files in the <b>/bin</b> directory as
well as to get metadata on the <b>/etc/tnc_confg</b> configuration file.
<p>
<b>carol</b> passes the health test and <b>dave</b> fails. Based on these assessments
which are communicated to the IMCs using the <em>Assessment Result</em> PA-TNC attribute,
the clients are connected by gateway <b>moon</b> to the "rw-allow" and "rw-isolate"
subnets, respectively.
<b>carol</b> passes the health test and <b>dave</b> fails because IP forwarding is
enabled. Based on these assessments which are communicated to the IMCs using the
<em>Assessment Result</em> PA-TNC attribute, the clients are connected by gateway <b>moon</b>
to the "rw-allow" and "rw-isolate" subnets, respectively.
</p>