Alto BEXT 100H Guía de usuario descargar pdf (Pagina 135)

GlobalProtect Administrator’s Guide 129

Use Host Information in Policy

Enforcement

Although you may have stringent security at your corporate network border, your network is really only as secure

as the end devices that are accessing it. With today’s workforce becoming more and more mobile, often requiring

access to corporate resources from a variety of locations—airports, coffee shops, hotels—and from a variety of

devices—both company-provisioned and personal—you must logically extend your network’s security out to

your endpoints to ensure comprehensive and consistent security enforcement. The GlobalProtect Host

Information Profile (HIP) feature enables you to collect information about the security status of your end

hosts—such as whether they have the latest security patches and antivirus definitions installed, whether they

have disk encryption enabled, whether the device is jailbroken or rooted (mobile devices only), or whether it is

running specific software you require within your organization, including custom applications—and base the

decision as to whether to allow or deny access to a specific host based on adherence to the host policies you

define.

This chapter provides information about the use of host information in policy enforcement. It includes the

following sections:

 About Host Information

 Configure HIP-Based Policy Enforcement

1 2 ... 130 131 132 133 134 135 136 137 138 139 140 ... 177 178

Sin comentarios

Alto BEXT 100H Guía de usuario Pagina 135