Answered by:
windows server 2008 NAP Enforcements

Question
-
hi all,
i want to have NAP 802.1X enforcement but i don't know how to configure the swishes or as the network team to configure it i know it will be different from swish to another swish but is there any common configuration to tell the network team to do to our swishes.
- one more question i want to have UAG Direct Access with NAP shall i install NAP on the same box of the UAG and use it for direct access and 802.1 X or i uses separate servers and use it for both as well or use one on the UAG server for the direct access and another separate one for the 802.1 X enforcement
Thanks
Tarek Khairy
Sunday, August 5, 2012 7:18 AM
Answers
-
Hi Tarek,
Thanks for posting here.
We may refer to a series of blog posts below in order to acquire on how to configure the hardware for supporting NAP:
NAP 802.1X Configuration Walkthrough
http://blogs.technet.com/b/nap/archive/2008/06/19/nap-802-1x-configuration-walkthrough.aspx
http://blogs.technet.com/nap/archive/2008/06/20/nap-802-1x-configuration-walkthrough-part-2.aspx
http://blogs.technet.com/b/nap/archive/2008/06/22/nap-802-1x-configuration-walkthrough-part-3.aspx
Base on my knowledge ,it should be fine to deploy NAP and DA into different physical hosts. But will suggest to get accurate responses form UAG forum:
http://social.technet.microsoft.com/Forums/en-US/forefrontedgeiag
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
- Marked as answer by Tiger LiMicrosoft employee Wednesday, August 8, 2012 2:51 AM
Tuesday, August 7, 2012 6:13 AM -
The TLG in the links below are also helpful:
Test Lab Guide: Demonstrate Forefront UAG DirectAccess with Network Access Protection (NAP)
http://www.microsoft.com/en-us/download/details.aspx?id=14474
Test Lab Guide: Demonstrate Forefront UAG SP1 RC DirectAccess with Network Access Protection (NAP)
http://www.microsoft.com/en-us/download/details.aspx?id=17056
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
- Marked as answer by Tiger LiMicrosoft employee Wednesday, August 8, 2012 2:51 AM
Tuesday, August 7, 2012 6:18 AM
All replies
-
Hi Tarek,
Thanks for posting here.
We may refer to a series of blog posts below in order to acquire on how to configure the hardware for supporting NAP:
NAP 802.1X Configuration Walkthrough
http://blogs.technet.com/b/nap/archive/2008/06/19/nap-802-1x-configuration-walkthrough.aspx
http://blogs.technet.com/nap/archive/2008/06/20/nap-802-1x-configuration-walkthrough-part-2.aspx
http://blogs.technet.com/b/nap/archive/2008/06/22/nap-802-1x-configuration-walkthrough-part-3.aspx
Base on my knowledge ,it should be fine to deploy NAP and DA into different physical hosts. But will suggest to get accurate responses form UAG forum:
http://social.technet.microsoft.com/Forums/en-US/forefrontedgeiag
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
- Marked as answer by Tiger LiMicrosoft employee Wednesday, August 8, 2012 2:51 AM
Tuesday, August 7, 2012 6:13 AM -
The TLG in the links below are also helpful:
Test Lab Guide: Demonstrate Forefront UAG DirectAccess with Network Access Protection (NAP)
http://www.microsoft.com/en-us/download/details.aspx?id=14474
Test Lab Guide: Demonstrate Forefront UAG SP1 RC DirectAccess with Network Access Protection (NAP)
http://www.microsoft.com/en-us/download/details.aspx?id=17056
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
- Marked as answer by Tiger LiMicrosoft employee Wednesday, August 8, 2012 2:51 AM
Tuesday, August 7, 2012 6:18 AM -
thanks for the reply , i have one more question is cisco nexus 7000 supported with NAP ?
Tarek Khairy
Tuesday, August 7, 2012 7:46 AM -
Hi Tarek,
Thanks for update.
It is depend on which enforcement are we are going to deploy . Device that capable with 802.1X will work with 802.1x NAP enforcement solution for example .
Network Access Protection
http://technet.microsoft.com/en-us/network/bb545879.aspx
Thanks.
Tiger Li
Tiger Li
TechNet Community Support
Wednesday, August 8, 2012 2:51 AM