|
Posted by Brian Komar on June 26, 2006, 8:02 am
If you were Registered and logged in, you could reply and use other advanced thread options > Please elaborate?
>
> I'd say that if the workstation isn't connected to your network, you have no
> visibility of that whatsoever, and nothing you can do about it. It's hard
> enough to achieve endpoint inspection in the networked scenario.
>
> Full disk encryption products (like Bitlocker in Vista) give you mitigating
> control for the lost/stolen asset situation.
>
>
The only way to verify CAC authentication is to configure the account to require
smart card
for interactive logon and force the user to logon with smart cards (CACs).
There is no way today to validate whether a user with knowledge of their
password used a
smart card or their password.
For a VPN scenario, you can enforce EAP/TLS authentication to require the use of
the CAC.
Brian
| 
XML site map