Microsoft publicly offers up a protocol for NAC

Microsoft is publishing part of its network access protection (NAP) software and it is being picked up by the Trusted Computing Group, making it part of a broader NAC framework.

The contribution, announced at Interop Las Vegas, is the protocol already used by Microsoft’s NAP agent to transmit data collected about the status of network endpoints to a policy server that makes decisions about whether and how much access devices get.

TCG and Microsoft represent two of the three main NAC architectures, with Cisco’s CNAC the third. All share the need for software that gathers data about the security posture of devices seeking network access.

The Microsoft contribution of the protocol means that NAC vendors can use Microsoft’s system health agent -- a standard part of Microsoft Vista clients -- in conjunction with their own policy servers as long as they comply with the protocol.

Juniper Networks, a key member of TCG, is demonstrating at Interop that its NAC gear is interoperable with the Microsoft client.

The Microsoft contribution is now public for other vendors to use, which will be possible for vendors whose NAC gear complies with TCG NAC standards.

The IETF, the established standards-writing body, is also working on NAC standards, including one for a similar protocol, but it is uncertain when such standards will be ready.

Cisco is not a member of TCG, but it is working on the IETF standards effort.