Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

[Contents][Glossary][Index][Back][Next]

14.1.5 Adding new clients to the network

To add a new client to the network after starting operations with your quarantine system, you will first need to register the relevant MAC address with JP1/NM. The procedure differs depending on whether the JP1/NM quarantine support facility is used.

Organization of this subsection
(1) When using the JP1/NM quarantine support facility
(2) When not using the JP1/NM quarantine support facility

(1) When using the JP1/NM quarantine support facility

If you are using the JP1/NM quarantine support facility, you do not need to register the MAC address with JP1/NM when you add a new client to the network or add a LAN board to a client.

Inventory information for the new client is reported to the management server via JP1/Software Distribution Client (relay system)# on the treatment server, and the security level of the client is judged. If the client is confirmed as Safe, the network control server is instructed to permit network connections for the client according to the action policy, and the client's MAC address is registered with JP1/NM automatically.

#
JP1/Software Distribution SubManager 07-50 or later can also be used.

(2) When not using the JP1/NM quarantine support facility

If you do not use the JP1/NM quarantine support facility, the MAC address will not be automatically registered with JP1/NM when you add a client to the network or a LAN board to a client.

As such, an administrator must register the MAC address of the new client or LAN board in JP1/NM from the Register Permitted PCs window.

Before you connect the new client to the network, first implement security measures for the client.

To connect a new client to the network:

  1. Implement security measures for the client.
    Apply the most recent patches for the client, or install the latest anti-virus product.

  2. Create a permitted-PC list file for the client to be added.
    The administrator creates a permitted-PC list file containing the MAC address of the client to be added. For details about how to create a permitted-PC list file, see 14.1.6 Registering permitted PCs.

  3. In the Register Permitted PCs window of the Client Security Management window, register the permitted-PC list file.
    The permitted-PC list file created in step 2 is registered in JP1/NM.

  4. Connect the client to the network.
    Physically connect the client to the network.

  5. Collect the latest inventory information for the client.
    The inventory information for the added client is collected by JP1/Software Distribution.

  6. Using the latest inventory information for the client, judge the security level of the client according to the security policy.

  7. Check the judgment results in the PC List window.
    Using the PC List window, the administrator confirms that the security level of the client added to the network is Safe.

[Contents][Back][Next]

[Trademarks]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated