Method of controlling network access and its system

Abstract

The invention discloses a network access control method and system, which are used to realize the access control of user terminals without 802.1x clients. The method includes: restricting the access rights of users who go online through the page Web authentication of the portal server so that they can only access restricted network resources; users download security clients through Web pages; when users access protected network resources, use The security client performs security authentication on the user terminal; enables users who have passed the security authentication to freely access protected network resources. The system includes: a network access device connected through a network, a Portal server and an AAA server. The invention can simply and safely realize the access control to the user terminal, guarantee the security of the user identity and the terminal accessing the network, reduce the system maintenance cost, and ensure the safety of network use.

Description

technical field [0001] The invention relates to network access control technology, in particular to an endpoint security access control method and system. Background technique [0002] With the rapid development of network application technology, network information security issues have become increasingly prominent. Ensuring the security of user terminals, preventing threats from invading the network, and effectively controlling user network access behaviors are the prerequisites for ensuring the safe operation of enterprise networks, and they are also urgent problems to be solved in enterprise network security management. [0003] At present, as an important technology and management method to solve network security problems, network access authentication technology is also rapidly popularized. Traditional user network access authentication methods mainly include 802.1x (port-based access control protocol) authentication, PPPoE (point-to-point protocol over Ethernet) auth...

AI Technical Summary

Problems solved by technology

[0014] The purpose of the present invention is to provide a network access control method to overcome the inability to perform mandatory user identity authentication for non-http / https protocol access under the existing Web authentication method, and the 802.1x authentication method requires a specific client, and cannot be accessed according to the access method. The shortcomings of access control for access endpoints based on the security status of the terminals, simple and safe implementation of access control for user endpoints, to ensure the identity of users accessing the network and the security of terminals

Images