HPE Intelligent Management Center Endpoint Admission Defense

Endpoint access control and management

Endpoint Admission Defense (EAD) Software supplies control and management of endpoint equipment; this module requires that a fully licensed version of the IMC User Access Management (UAM) Software module be installed; the number of licensed nodes for EAD software must match the number of UAM licensed nodes.

Enhancement of hierarchy management

The root node in the hierarchy architecture can set security policies for the entire network and distribute the policies to lower-level nodes; the lower-level nodes can send security and system status to the parent node, enabling the parent node to monitor lower-level nodes in real time; reports are also provided to administrators.

Anti-X software policy management

The Anti-X checking feature enables administrators to set an Anti-X checking rule for each security policy made in IMC, rather than having a single rule for all security policies.

COA support

EAD supports change of authorization attributes for a session. This feature offers a quarantine mode for devices, including other vendor devices.

Complete security evaluation

EAD reduces network vulnerabilities by determining endpoint compliance to defined policies; security checks can include anti-virus, anti-spyware, anti-phishing, firewall, required patches, and hard disk encryption software. EAD supports auto-remediation options with integration to patch management software like Microsoft Systems Management Server (SMS)/Windows Server Update Services (WSUS), and with antivirus software from Symantec, McAfee, and Trend Micro.

Endpoint identity

EAD software integrates with the UAM module to leverage existing user directories and groups to aid in the access and posture of policy creation; in addition to user name credentials, smart card and certificate authentication are also supported.

Integration of user management and topology management

On the topology map, user management operations are provided in the menus of the access devices or access terminals, this makes user management more flexible.

Desktop asset management (DAM)

EAD software supports desktop asset management features to provide a complete inventory of endpoints; hardware specifications can be auto-discovered, and software inventory can be completed to generate reports or run queries; in addition, administrators can set policies to aid in data theft prevention by controlling the computer peripherals, like USB storage; DAM also includes password and share controls and power management across endpoints.

• Endpoint access control and management
• Enhancement of hierarchy management
• Anti-X software policy management
• IPv6 supported
• COA supported
• eAPI for DAM - the IMC Extended API suite includes APIs for DAM
• Complete security evaluation
• Endpoint identity
• Integration of user management and topology management
• Desktop asset management (DAM)

MPN: JG755AAE