machine quarantine on centos linux

codenjanod · 05-22-2007, 03:36 AM

Hi all,

I was not too sure if I should post this under security or under networking.

I am looking for an app that can preferably run on Centos 4.4 or 5 or maybe have a setup of rules on Centos that can help me with my problem.

My problem:
I need to check/scan machines that connect either via cable or wifi to my network for certain criteria, like update level, security patches, anti virus status, etc.
If these machines fail these tests, they need to be put into a quarantine zone and access to the LAN will be prohibited.
From that zone updates etc will be available.

If they pass the scan, they will have access to the LAN.

I do not wish to purchase any hardware like Cisco devices for this.
I also do not wish to use Cisco NAC as I am not willing to fork out insane amounts of money for this.

Does anybody know of any software that can do such checks on a LAN?
Or can this be done with iptables? and if so, how?

Thank you

kstan · 05-22-2007, 04:27 AM

We need more information.

Quote:

Originally Posted by codenjanod

Hi all,
I need to check/scan machines that connect either via cable or wifi to my network for certain criteria, like update level, security patches, anti virus status, etc.
U mean Microsoft Windows Client?
If these machines fail these tests, they need to be put into a quarantine zone and access to the LAN will be prohibited.
You mean when your server detect something wrong then it'll tell your switches transfer particular port into a quarantine vlan?

If they pass the scan, they will have access to the LAN.
Refer previous question

Does anybody know of any software that can do such checks on a LAN?
Probably nessusd can fullfill partial of your need, but it won't so intelligent untill can talk to your switches.

Or can this be done with iptables? and if so, how?
I think not possible.

If I'm not mistaken, only Trend Micro have such of products.

Good lucks,
Ks