Using endpoint host checking to classify unmanaged devices in a network and to improve network location awareness
View Patent ↗A device receives, from a managed device, endpoint information associated with an unmanaged device connected to the managed device in a network. The device also receives unmanaged device information that partially identifies the unmanaged device, and completely identifies the unmanaged device based on the endpoint information and the unmanaged device information.
1. A method, comprising:
receiving, by a computing device and from a first device, endpoint information associated with an endpoint device connected to the first device in a network, the endpoint information comprising configuration settings of the first device for the endpoint device;
receiving, by the computing device, device information associated with the endpoint device;
determining, by the computing device, that the endpoint device comprises a particular type of device based on the device information;
determining, by the computing device, that the endpoint device comprises a particular model of the particular type of device based on the endpoint information; and
selecting a network functionality for providing to the endpoint device based on the endpoint device comprising the particular model of the particular type of device.
2. The method of claim 1 , further comprising:
selecting a further network functionality for providing to the endpoint device based on the device information.
3. The method of claim 1 , where the selected network functionality includes one or more of:
access privileges associated with the network,
firewall privileges associated with the network, or
authorization information associated with the network.
4. The method of claim 1 , where the first device includes a host checking client for obtaining information associated with accessing the network.
5. The method of claim 1 , where the endpoint device does not include a host checking client for obtaining information associated with accessing the network.
6. The method of claim 1 , where the computing device includes a network admission control (NAC) device; and
where receiving the endpoint information includes:
receiving endpoint integrity check information related to an endpoint integrity check performed by the first device and in connection with the endpoint device.
7. A device, comprising:
a processor to:
receive, from a first device, endpoint information associated with an endpoint device connected to the first device in a network, the endpoint information comprising configuration settings of the first device for the endpoint device,
receive device information associated with the endpoint device,
determine that the endpoint device comprises a particular type of device based on the device information,
determine that the endpoint device comprises a particular model of the particular type of device based on the endpoint information,
select a network functionality for providing to the endpoint device based on the endpoint device comprising the particular model of the particular type of device,
the endpoint device using the network functionality in conjunction with accessing the network.
8. The device of claim 7 , where the selected network functionality includes one or more of:
access privileges associated with the network,
firewall privileges associated with the network, or
authorization information associated with the network.
9. The device of claim 7 , where the first device includes a host checking client that obtains information associated with accessing the network.
10. The device of claim 7 , where the endpoint device does not include a host checking client that obtains information associated with accessing the network.
11. The device of claim 7 , where, when determining that the endpoint device comprises the particular type of device, the processor is to:
determine that the endpoint device comprises a printer based on the device information.
12. The device of claim 7 , where, when obtaining the endpoint information, the processor is to:
obtain configuration settings for a printer, and
where, when determining that the endpoint device comprises the particular model of the particular type of device, the processor is further to:
determine that the printer comprises a particular model printer based on the configuration settings.
13. A non-transitory computer-readable medium storing executable computer instructions, the instructions configured to, in response to being executed, perform steps comprising:
receiving, from a first device, endpoint information associated with an endpoint device connected to the first device in a network, the endpoint information comprising configuration settings of the first device for the endpoint device;
receiving device information associated with the endpoint device;
determining that the endpoint device comprises a particular type of device based on the device information;
determining that the endpoint device comprises a particular model of the particular type of device based on the endpoint information; and
selecting a network functionality for providing to the endpoint device based on the endpoint device comprising the particular model of the particular type of device.
14. The method of claim 13 , further comprising:
selecting a further network functionality for providing to the endpoint device based on the device information.
15. The method of claim 13 , where the selected network functionality includes one or more of:
access privileges associated with the network,
firewall privileges associated with the network, or
authorization information associated with the network.
16. The method of claim 13 , where the first device includes a host checking client for obtaining information associated with accessing the network.
17. The method of claim 13 , where the endpoint device does not include a host checking client for obtaining information associated with accessing the network.
18. The method of claim 13 , where receiving the endpoint information includes:
receiving endpoint integrity check information related to an endpoint integrity check performed by the first device and in connection with the endpoint device.
19. A method, comprising:
receiving, by a network admission control (“NAC”) device computing device and from a first device, endpoint integrity check information related to an endpoint integrity check performed by the first device in connection associated with an endpoint device connected to the first device in a network, the endpoint information comprising configuration settings of the first device for the endpoint device;
receiving, by the NAC computing device, device information associated with the endpoint device;
determining, by the NAC computing device, that the endpoint device comprises a particular type of device based on the device information;
determining, by the NAC computing device, that the endpoint device comprises a particular model of the particular type of device based on the endpoint integrity check information; and
selecting a network functionality for providing to the endpoint device based on the endpoint device comprising the particular model of the particular type of device; and
providing the network functionality to the endpoint device.