Brain Imaging & Analysis Center

User Tools

Site Tools

You are here: biac » biac » nac
biac:nac

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
biac:nac [2021/06/30 21:27]
cmp12 [Network Access Control ( NAC ) Requirements for access to Duke Health Networks] 		biac:nac [2022/08/31 17:30]
cmp12 [Steps to get registered]
Line 1: Line 1:
-====== Network A +====== Network Access Control ( NAC ) Requirements for access to Duke Health Networks ======
-ccess Control ( NAC ) Requirements for access to Duke Health Networks ======+
  
 Duke has rolled out specific security requirements for access to the DHE networks.  If you use VPN on a personal machine and need to connect to DHE servers ( ie: munin, cluster, etc ) then you are expected to meet specific requirements. Duke has rolled out specific security requirements for access to the DHE networks.  If you use VPN on a personal machine and need to connect to DHE servers ( ie: munin, cluster, etc ) then you are expected to meet specific requirements.
  
-1) Device registered with NAC : [[https://dukereg.duke.edu/|NAC Registration]] +1) Device registered with NAC : [[https://dukereg.duke.edu/|NAC Registration]]\\ 
- +2) Have the NAC agent installed on your local computer\\ 
-2) Have the NAC agent installed on your local computer +3) Have an approved anti-virus software ( crowdstrike is preferred ) \\ 
-3) Have an approved anti-virus software +4) Have an approved operating system version\\  
-4) Have an approved operating system version  +
  
 You can read more about NAC here : [[https://nac.dhts.duke.edu/network-access-control-nac]] You can read more about NAC here : [[https://nac.dhts.duke.edu/network-access-control-nac]]
  
  
 +====== Steps to get registered ======
 +
 +
 +1) Download and install the FortiNAC Agent
 +^ Windows ^ OSX ^ Linux ^
 +|[[https://shadow.biac.duke.edu/Network_Requirements/NAC%20Agent/Windows/|FortiNAC.exe]]|[[https://shadow.biac.duke.edu/Network_Requirements/NAC%20Agent/OSX/FortiNAC%20Persistent%20Agent.dmg|FortiNAC.dmg]]| [[https://shadow.biac.duke.edu/Network_Requirements/NAC%20Agent/Linux/ | RHEL of Debian ]]|
 +
 +2) Find your WiFi Mac Address
 + - Mac : System Preferences -> Network -> Wi-Fi -> Advanced Button -> Hardware Tab
 + - Windows : Control Panel > Network and Internet > Network and Sharing Center -> Network Connection -> Click Details -> Physical Address 
 +
 +3) Register your device at : [[https://dukereg.duke.edu/|NAC Registration]]
  
-====== Windows ======+4) Install an approved anti-virus software: 
 +^ Microsoft Windows ^ Mac OSX ^ 
 +|[[https://www.avast.com/en-us/free-antivirus-download|Avast]]|[[https://www.avast.com/en-us/free-mac-security|Avast]]| 
 +|Microsoft Windows Defender, built in Windows 10|[[https://www.bitdefender.com|Bitdefender]]| 
 +|[[https://www.avg.com/en-us/free-antivirus-download|AVG-2019 free]]|
  
-1) Download and install the FortiNAC Agent : [[https://shadow.biac.duke.edu/Network_Requirements/NAC%20Agent/Windows/|FortiNAC.exe]] 
  
-2) Register your device at : [[https://dukereg.duke.edu/|NAC Registration]]+5) Approved Operating System versions:
  
-3) Install an approved anti-virus software ( Crowdstrike ( preferred ), Avast, BitDefender, Microsoft Windows Defender ) : [[https://shadow.biac.duke.edu/Network_Requirements/Crowdstrike/Windows/|Crowdstrike]]+^ Microsoft Windows     ^ Mac OSX ^ 
 +| Windows 7    | 10.15-Catalina| 
 +| Windows 8    | 11.0-Big Sur| 
 +| Windows 10   | 12.0-Monterey|
  
-4) Approved Windows versions: 
- - Windows 7 
- - Windows 8 
- - Windows 10 
  
-====== Mac OSX ======+==== Verify ====
  
-1) Download and install the FortiNAC Agent : [[https://shadow.biac.duke.edu/Network_Requirements/NAC%20Agent/OSX/FortiNAC%20Persistent%20Agent.dmg|FortiNAC.dmg]]+Connect to VPN, then open a browser and go to a Duke Site to verify.\\
  
-2) Register your device at : [[https://dukereg.duke.edu/|NAC Registration]]+Note that sometimes it takes a few seconds between launching the VPN and NAC verification, so if you try to immediately connect to a DHE server you may still be in a remediation network zone.  Give it a few more seconds, or potentially reconnect to VPN if needed.
  
-3) Install an approved anti-virus software ( Crowdstrike ( preferred ), Avast, BitDefender : [[https://shadow.biac.duke.edu/Network_Requirements/Crowdstrike/OSX/|Crowdstrike]] 
  
-4) Mac OS has to be one of the following: 
- - 10.11-El Capitan 
- - 10.12-Sierra 
- - 10.13-High Sierra  
- - 10.14-Mojave 
- - 10.15-Catalina 
- - 11.0-Big Sur 
  
-====== Linux ======+====== NAC on the DH1 wireless network ======
  
 +While on campus all NAC requirements above must be met to join the secured DH1 wireless network, which replaces clubs:\\
 + * [[https://nac.dhts.duke.edu/nac-dh1-wireless| NAC DH1 wireless]]\\
 + * please follow instructions for user-managed devices\\
  
biac/nac.txt · Last modified: 2023/04/07 20:47 by cmp12

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki