UAC/OAC: How to address multiple LAN issue.

[Charles_Woo_]

Hi All,

I am wondering how to tackle a mulitple LAN interface situation.

If a end point with 2 LAN interface, one (interface A) is 802.1x authenticated by UAC, while another (Interface B) is directly connect to internet. Can OAC/UAC disable that the "interface B" so that only "interface A" is active.

The reason is that ppl will worry the attack can launch from untrust network interface (interface B) to the internal resource via "interface A".

Thanks first.

Best Regards,

Charles

[mnarine_]

If OAC does not control the NIC, it cannot make changes to it directly. At least not that I'm aware of.

-Mike

[figo2000_]

Thanks Mike.

I finally found that OAC has "Wireless Suppression" feature, it can prevent user logging Wireless & Wired at the same time...

Charles

[mnarine_]

Ah ok. I thought you were referring to 2 wired NIC, not 1 wired and 1 wireless.

Glad you found a solution.

-Mike

[Brian Pimentel_]

Mnarine is correct. If you are using the Ethernet adapter for your connection to the IC and want to prevent access via a Wi-Fi connection then Wireless suppression is for you. The way it works is when enabled OAC will drop the OAC Wi-Fi connection whenever the Ethernet adapter has a valid IP address.

If you mean two Wi-Fi or Ethernet Adapters then you'll need to find an solution through the OS.