DHCP CENTRIC NETWORK ACCESS MANAGEMENT THROUGH NETWORK DEVICE ACCESS CONTROL LISTS
In embodiments of the present invention improved capabilities are described for the computer program product steps of serving a limited network connection to an endpoint computing facility via network device access control lists, where the limited network connection may enable the endpoint to communicate with a limited set of network resources; assessing security compliance information relating to the endpoint to determine a security state; and in response to receiving an indication that the security compliance information is acceptable, serving a managed network connection to the endpoint, where the managed connection may enable the endpoint to communicate with a larger set of network resources than the limited network connection.
1 . A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:
serving a limited network connection to an endpoint computing facility via network device access control lists, wherein the limited network connection enables the endpoint to communicate with a limited set of network resources;
assessing security compliance information relating to the endpoint to determine a security state; and
in response to receiving an indication that the security compliance information is acceptable, serving a managed network connection to the endpoint, wherein the managed connection enables the endpoint to communicate with a larger set of network resources than the limited network connection.
2 . The computer program product of claim 1 , further comprising: monitoring the security state and re-serving the limited network connection protocol to the end point via network device access control lists in the event the security state changes.
3 . The computer program product of claim 1 , wherein the limited network connection includes access to an Internet connection.
4 . The computer program product of claim 1 , wherein the limited network connection includes access to security assessment computing facilities.
5 . The computer program product of claim 1 , wherein the indication that the security compliance information is acceptable is the presence of the endpoint computing facility on an access control list.
6 . The computer program product of claim 5 , wherein the access control list is included in a network device.
7 . The computer program product of claim 1 , wherein the managed network connection is provided by the access control lists.
8 . The computer program product of claim 1 , wherein the endpoint is monitored for compliance state and in the event the endpoint falls out of compliance with a policy, the limited network connection is restored.
9 . The computer program product of claim 8 , wherein the policy is resident on the endpoint and updated through a centralized policy management server.
10 . The computer program product of claim 1 , wherein the network device is at least one of a hub, router, and switch.