Hp Identity-Driven Manager (Idm) - HP E3800-24G-PoE+-2SFP+ Access Security Manual

Security Overview

HP Identity-Driven Manager (IDM)

1-20
HP Identity-Driven Manager (IDM)
IDM is a plug-in to HP E-PCM Plus and uses RADIUS-based technologies to
create a user-centric approach to network access management and network
activity tracking and monitoring. IDM enables control of access security
policy from a central management server, with policy enforcement to the
network edge, and protection against both external and internal threats.
Using IDM, a system administrator can configure automatic and dynamic
security to operate at the network edge when a user connects to the network.
This operation enables the network to:
approve or deny access at the edge of the network instead of in the core;
■
distinguish among different users and what each is authorized to do;
■
■ configure guest access without compromising internal security.
Criteria for enforcing RADIUS-based security for IDM applications includes
classifiers such as:
■ authorized user identity
authorized device identity (MAC address)
■
■ software running on the device
physical location in the network
■
■ time of day
Responses can be configured to support the networking requirements, user
(SNMP) community, service needs, and access security level for a given client
and device.
For more information on IDM, go to the HP Web site at www.hp.com/solutions,
click on Security.