微软2007系列一.ppt

微软2007系列一.ppt? 2007 Microsoft Corporation. All rights reserved ? 2007 Microsoft Corporation. All rights reserved ? 2007 Microsoft Corporation. All rights reserved Where did e from?NPS ArchitectureNPS/NAP Configuration DemonstrationDesign and Deployment Best PracticesWhat NAP is and isn’t all about? 2007 Microsoft Corporation. All rights work Policy Server is the essor to Authentication Services (IAS)Provides Policy and Health VerificationOnly in Windows Server 2008 NPS is the Microsoft implementation of the RADIUS standard and it supports the major RADIUS RFCs? 2007 Microsoft Corporation. All rights reserved NPS provides policy definitions and enforcement; it is not an authentication sourceWhen an access es to the NPS it assesses it against its policies, then uses Active Directory to authenticate the user or deviceVPN workDial-work Policy Server? 2007 Microsoft Corporation. All rights reserved User requests access User requests access to portto work device asks work device asks user for credentialsfor credentialsDevice forwards NPS Device forwards NPS credentials and credentials and connection detailsconnection detailsRADIUS evaluates RADIUS evaluates connection details against connection details against policy; forwards credentials policy; forwards credentials to Active Directory for to Active Directory for authenticationauthenticationIf policy matches, and user If policy matches, and user is authentic, access allowedis authentic, access allowedDevice allows accessDevice allows accessPolicyRules? 2007 Microsoft Corporation. All rights reserved ..………………………………Data Store ServerData Store ServerData Data essSDOSDOSDO HelperSDO shMMCMMCPolicy EnginePolicy EngineIAS IAS HelperHelperRadius Radius boundaryProcess boundaryRW RW configuration configuration datadataDictionary of Dictionary of NPS attributesNPS attributesAbstracts XML files Abstracts XML files to all processes to all processes (COM server)(COM serve