Network access quarantine control

19.05.2006
DEFINITION: Network access quarantine control, or NAQC, is a set of services and utilities available in Windows Server 2003 with the Resource Kit or with Service Pack 1 that allows you to prevent remote users from connecting to your network with machines that aren't up-to-date and secure by quarantining them in a secured area before permitting unfettered access.

--

It's long been known to expert network administrators that most nefarious software and malware infiltrate your production network not through holes in your firewall, or brute-force password attacks or anything else that might occur at your corporate headquarters or campus.

Rather, they gain access to your wires through your mobile users when they try to connect to your business network while on the road. There's a big problem with remote users, and it hinges on the unpredictability of the machines from which they're connecting.

Most remote users are authenticated and allowed access to your network only on the basis of their identity. They can prove that they are who they say they are, and that's good enough for a lot of deployments. But problematically, no effort is made to verify that their hardware and software on their machines meets a certain baseline requirement. Remote users could, and do every day, fail any or all of the following common-sense guidelines for very basic computer security:

- The latest service pack and the latest security hot fixes are installed.