Subject: Re: RE: RE: [Nea] PT protocol must be capable of transportingmessagesforassessment during network connection request ?

From: Han Yin <[email-masked]>
Date: Mon, 29 Jan 2007 00:12:56 +0800

Mahalingam (Mani),

	Thanks for your response.

    I agree your modification about section 6.1.1.2. Such description is more clear.    
    How about my fist question?

    In some environment, the assessment only occurs after the host is connected to the network, which is described in section 6.1.3.1.  In such cases, user is concerned about endpoint security status, not the network access. Since inital-assessment and re-assessment is both performed after the host is connected to the network,  it is unnecessary to require NEA protocols carry assessment message during network access request. I think requirement C-2 is redundant and not able to cover the use case in 6.1.3.1.
    
     regards,

　　　　　　　　Han Yin
　　　　　　　　[email-masked]

=======================

FROM:    [email-masked]
SENT:    2007-01-28 00:42:39
TO:      [email-masked]; [email-masked]; [email-masked]
CC:      
Subject: RE: RE: [Nea] PT protocol must be capable of transportingmessagesforassessment during network connection request ?

>Han,
>
> 
>
>Thanks for the thorough read and feedback. To your specific question on 6.1.2.2
>
>Sorry about the delay in responding.
>
> 
>
>Regards,
>
>-mani
>
>  _____  
>
>From: Han Yin [mailto:[email-masked]] 
>Sent: Thursday, January 25, 2007 9:43 AM
>To: Kaushik Narayan (kaushik); nea
>Subject: Re: RE: [Nea] PT protocol must be capable of transporting messagesforassessment during network connection request ?
>
> 
>
>Hi Kaushik Narayan, 
>
> 
>
>　　Thanks for your response. Please find my response inline.
>
> 
>
>======== 2007-01-25 03:34:01 您在来信中写道： ========
>
> 
>
>	Hi Han,
>
>	 
>
>	Thanks for your comments. Please find my response inline.
>
>	 
>
>	[Mani, Mahalingam (Mani)] [snip]
>
>	
>	Another question of PT protocol:
>
>	In the 16th procedure of section 6.1.2.2, it is described that PT protocol informs the gateway of the compliance status. But, how to apply the result of assessment to network access control is out of NEA WG scope. Is it a unintended mistake? 
>
>	 
>
>	<Kaushik>  This is intentional since the mechanisms used to apply access control is out of scope of the NEA charter. There is a line in the NEA charter that clearly states. "Specifying mechanisms for providing restricted access is outside the scope of the NEA WG. "
>
>	 
>
>	<Han Yin>
>
>	But,in Require Introduction, it is stated: 
>
>	"While the NEA Reference Model recognizes there is 
>	      a link between an Endpoint Assessment and the enforcement of 
>	      the Assessment decision, the mechanisms and protocols for 
>	      enforcement are not in scope for this specification."
>
>	So, PT protocol is not required to inform the assess result to the gateway. Deployer can complete it by other protocols.
>
>	In my sense, expression in the 16th porocedure of section 6.1.2.2 is somewhat confusing. 
>
>	I think it can be modified as " the compliance status is informed to gateway by PT protocol or other protocols".
>
>	</Han Yin>
>
>	 
>
>	<mani>
>
>	[Mani, Mahalingam (Mani)] the first para at the beginning of section 6 states the motivation of the section where it says 
>
>	“It should be emphasized that the provided examples are not intended to indicate the only approach to addressing the use case but rather are included to ease understanding of how the flows might occur and require support from the NEA protocols.”
>
>	This use-case cites PT as a possible carrier to help illustrate the use-case. If it is confusing, it can be worded differently as you suggest or, alternatively
>
>	“The PB server also informs the gateway of the compliance status, so that it can take the appropriate enforcement action if required.” Which is less specific about 
>
>	</mani>
>
>	regards,
>
>	  kaushik 
>	
>	
>	Thank to the requirement design team!
>	
>	Best regards
>
>	Han Yin 
>
>	[email-masked]
>
>= = = = = = = = = = = = = = = = = = = = = = 
>
> 
>
>　　　　　　　　　　　　　　Han Yin
>
>　　　　　　　　　　　　　　[email-masked]
>
>　　　　　　　　　　　　　　　　　2007-01-26
>
> 

_______________________________________________
Nea mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/nea