User connects to corporate Wi-Fi access point or makes a VPN connection request.Configure the NAC partner solution for certificate authentication.Configure the NAC partner solution with the appropriate settings including the Intune discovery URL.Register the NAC partner solution with Azure Active Directory (AAD), and grant delegated permissions to the Intune NAC API.Once the NAC solution is integrated with Intune, steps 4-9 describe the ongoing operation.
The first three steps, 1-3, explain the onboarding process. The following list is an overview on how NAC integration works when integrated with Intune. For more information, see Common ways to use Conditional Access with Intune. NAC works with Conditional Access to provide access control decisions. If the users visit this page, their devices are synchronously reevaluated for compliance. The Unknown state is reserved for newly enrolled devices that haven't been evaluated for compliance yet.įor devices that are blocked from access to resources, the blocking service should redirect all users to the management portal to determine why the device is blocked. Feature behaviorsĭevices that are actively syncing to Intune can't move from Compliant / Noncompliant to Not Synced (or Unknown). For example, users can be allowed or denied access when trying to access corporate Wi-Fi or VPN resources. If the device is enrolled and compliant with Intune, the NAC solution should allow the device access to corporate resources. If the device isn't enrolled, or is enrolled and not compliant with Intune device compliance policies, then the device should be redirected to Intune for enrollment, or for a device compliance check. NAC solutions check the device enrollment and compliance state with Intune to make access control decisions. How do Intune and NAC solutions help protect your organization resources? For more information, see our blog post on the new compliance retrieval service. Currently, the following NAC partner product supports the new NAC service:Ĭontact your NAC partner if you have questions on the impact of this transition. A new NAC service was released in July 2021 and many of our NAC partners are transitioning to this new service.
0 kommentar(er)
