Administrator who wants to add the following rules into their network access policy in terms of compliance can:
- Quarantine PCs trying to open particular ports used by known worms.
- Send a warning message to incompliant user’s terminals that are not running required software or running banned software.
- Required software: Security client, Groupware client ...
- Banned software: P2P, Online trading, Gambling ...
- Check and modifies the registry value (or INI file that contain configuration information) to enforce application patch installation.
- Migrate NAQC in Windows Server 2003 to NAP in Windows Server 2008 to maintain leagcy remote access control.
- Control terminals with mass storage devices attached (CD writers or USB drives) to protect against information leaks.
- Control terminals with shared folders to protect against information leaks.
- Include heterogeneous terminals (i.e. Linux, Mac) in Microsoft NAP platform.
- Control terminals trying to connect to the wireless network to protect against information leaks.