Soda Endpoint Security Support; How Soda Functionality Works - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

• Connection Control – Controls network connections based on Domain, IP address, Port,
and Service. For example, Connection Control can prevent a Trojan from sending out a
confidential document, downloaded legitimately through an SSL VPN tunnel, to a malicious
e-mail server (SMTP) using a second network tunnel.
• Adaptive Policies – Sense the type and location of device and adjusts access based on
endpoint parameters such as IP range, registry keys, and DNS settings.
The SODA endpoint security modules are configured through Sygate On-Demand Manager (SODA
Manager), a Windows application. SODA Manager is used to create a SODA agent, which is a Java
applet that is downloaded by client devices when they attempt to gain access to the network. Once
downloaded, the SODA agent runs a series of security checks to enforce endpoint security on the client
device.
DWS-1008 switches support SODA endpoint security functionality in the following ways:
• SODA agent applets can be uploaded to a switch, stored there, and downloaded by clients
attempting to connect to the network.
• The switch can ensure that clients run the SODA agent security checks successfully prior
to allowing them access to the network.
• Different sets of security checks can be downloaded and run, based on the SSID being
used by the client.
• If the security checks fail, the switch can deny the client access to the network, or grant the
client limited access based on a configured security ACL.
• When the client closes the Virtual Desktop, the switch can optionally disconnect the client
from the network.
This section describes how the SODA functionality is configured to work with a switch, and the
procedure that takes place when a user attempts to connect to an SSID where the SODA functionality
is enabled.
Note that in the current release, the SODA functionality works only in conjunction with the Web Portal
WebAAA feature.
D-Link DWS-1008 User Manual

SODA Endpoint Security Support

How SODA Functionality Works

8