Technical Summary
This document defines the problem statement, scope and
protocol requirements between the components of the NEA
(Network Endpoint Assessment) reference model. NEA provides
owners of networks (e.g. an enterprise offering remote access)
a mechanism to evaluate the posture of a system. This may
take place during the request for network access and/or
subsequently at any time while connected to the network.
The learned posture information can then be applied to a
variety of compliance oriented decisions. The posture
information is frequently useful for detecting systems
that are lacking or have out of date security protective
mechanisms such as: anti-virus and host-based firewall
software.
Working Group Summary
This document is a product of the Network Endpoint Assessement
(nea) Working Group. There is strong consensus in the WG to
publish this document.
Protocol Quality
Tim Polk reviewed this specification for the IESG. There is at least
one group of WG participants drafting protocol specifications to
meet the requirements in this document.