Enabling network communication from role based authentication
View Patent ↗Network communications are secured on clients that do not have a user properly logged in and authenticated. The clients have transmit and/or receive functionality disabled. When a user logs into the client and is properly authenticated, the transmit and/or receive functionality is enabled. In some embodiments, the client can then download firewall policy information to prevent the client from communicating on certain ports or with certain clients. The firewall policy information may be specific to a role that a user logged into the client has. For example, administrators, executives and employee roles may each use different firewall policy information.
1. A method of securing a network interface device installed on a host computer comprising:
initializing, without transmit or receive functions for network communications, a network interface device installed on a host computer;
receiving, at the network interface device installed on the host computer, notification from the host computer on that a user has been authenticated to the host computer; and
in response to receiving notification that the user has been authenticated to the host computer, enabling transmit and receive functions for network communications of the network interface device installed on the host computer.
2. The method of claim 1 , further comprising accessing a firewall policy server to download firewall policy information that is used by a firewall on the network interface device after enabling transmit functions of the network interface device.
3. The method of claim 2 , wherein accessing a firewall policy server is performed before transmitting or receiving data from any other clients or servers.
4. The method of claim 2 , wherein accessing a firewall policy server comprises authenticating the firewall policy server.
5. The method of claim 2 , wherein receiving notification that a user has been authenticated to the host computer includes receiving notification that the authenticated user is associated with a role, and wherein accessing a firewall policy server comprises downloading firewall policy information for the role.
6. The method of claim 2 , further comprising receiving firewall policy information communicated to the host computer and using the firewall policy information at a hardware based firewall on the network interface device.