802.1X Enforcement with NAP

Network Access Protection (NAP) for Windows Server 2008, Windows Vista, and Windows XP provides components and an application programming interface (API) set that help you enforce compliance with health policies for network access or communication. Developers and network administrators can create solutions for validating computers that connect to their networks, can provide needed updates or access to needed resources, and can limit the access of noncompliant computers.

802.1X Enforcement is one of the NAP enforcement methods included with Windows Server 2008, Windows Vista, and Windows XP. With 802.1X Enforcement, an 802.1Xauthenticated wireless client must prove that it is compliant with system health requirements before being allowed full access to the intranet. If the wireless client is not compliant with system health requirements, the wireless AP places the wireless client on a restricted network containing servers that have resources to bring the wireless client back into compliance. The wireless AP enforces the restricted access through IPv4 and IPv6 packet filters that are placed on the wireless connection. After correcting its health state, the wireless client validates its health state again, and if compliant, the packet filters on the wireless connection that confine the access to the restricted network are removed.

In order for 802.1X Enforcement to work, you must already have a working protected wireless deployment.