Method of controlling network access and its system

Abstract

This invention discloses a network access control method and a system including: limiting the access extent of authority to users on-line by the web certification of a portal server to limit it to access the limited network resources only, a user downloads the safety UE by the Web, when the user accesses the protected network resources, the safety UE is used to certificate the safety of the UE and users passing through the safety certification access the protected network resources freely. The system includes: network access devices connected by network, a portal server and an AAA server.

Description

technical field [0001] The invention relates to network access control technology, in particular to an endpoint security access control method and system. Background technique [0002] With the rapid development of network application technology, network information security issues have become increasingly prominent. Ensuring the security of user terminals, preventing threats from invading the network, and effectively controlling user network access behaviors are the prerequisites for ensuring the safe operation of enterprise networks, and they are also urgent problems to be solved in enterprise network security management. [0003] At present, as an important technology and management method to solve network security problems, network access authentication technology is also rapidly popularized. Traditional user network access authentication methods mainly include 802.1x (port-based access control protocol) authentication, PPPoE (point-to-point protocol over Ethernet) auth...

AI Technical Summary

Problems solved by technology

[0014] The purpose of the present invention is to provide a network access control method to overcome the inability to perform mandatory user identity authentication for non-http / https protocol access under the existing Web authentication method, and the 802.1x authentication method requires a specific client, and cannot be accessed according to the access method. The shortcomings of access control for access endpoints based on the security status of the terminals, simple and safe implementation of access control for user endpoints, to ensure the identity of users accessing the network and the security of terminals

Images