The host checker was configured to require a valid virus scanner and an active personal firewall. In this case I want to avoid that people launch notepad.exe and still be able to access the Internet. When you check this at the machine-level (only), you're gonna miss it when the user launches the software from the desktop. the use of torrent clients is something that usually occurs in the user space on the PC. There are scenario's where it's not possible to check all requirements within one role/hostchecker policy. PC's can get compromised even when no user is logged in. So you should make it a requirement that the firewall is active on a PC even when a user is not logged in to the machine. These services start (when used correctly) as a service without the need for a logged in user. Examples are the use or existence of the firewall and/or AV software on the PC. The reason is that I want some host check functionalities be available only in the Computer 'space' (when no user is logged on). I created separate roles for the Domain Computer and Domain User.

It also defines if change of IP address is allowed, and what Junos Pulse settings (Connection Component Set) is used for that role. The user role definition includes the Host-checker requirements. Domain Controller + DNS Server - 192.168.1.10.When a PC is placed in Quarantine, it looses all access to the Internet, but can still resolve domain names, access minimal internal services like the DHCP server and the UAC. This is where the naughty people/PC's are dropped Network where the normal workstations are placed This VLAN hosts the UAC, Active Directory, DNS and DHCP services Inter-VLAN communication is handled by a Juniper SRX210.

The setup consists of four networks (VLAN's) and Internet access. Juniper Pulse Access Control Service a.k.a.This blog post hold the key ingredients for successfully authenticating on layer 2 (802.1x or dot1x) and layer 3 with:

Juniper host checker