MENU
What best defines a 'Post-Connect Methodology'?
Comprehensive and Detailed Explanation From Exact Extract of Forescout Platform Administration and Deployment:
According to theForescout Blog on Post-Connect Access Controlsand theComply-to-Connect framework documentation, aPost-Connect Methodologyis best defined as treating endpoints as'Innocent until proven guilty'.
Definition of Post-Connect Methodology:
According to the official documentation:
'Post-connect' is described as treating endpoints as innocent until they are proven guilty. They can connect to the network, during and after which they are assessed for acceptance criteria.'
How Post-Connect Works:
According to the Post-Connect Access Controls blog:
Initial Connection- Endpoints are allowed to connect to the network immediately (innocent)
Assessment During/After Connection- After connecting, endpoints are assessed for acceptance criteria
Compliance Checking- Endpoints are checked for:
Corporate asset status (must be company-owned)
Security compliance (antivirus, patches, encryption, etc.)
Remediation or Quarantine- Based on assessment results:
Compliant endpoints: Full access
Non-compliant endpoints: Placed in quarantine for remediation
Post-Connect vs. Pre-Connect:
According to the Comply-to-Connect documentation:
Pre-Connect- 'Guilty until proven innocent' - Endpoint must prove compliance BEFORE getting network access
Post-Connect- 'Innocent until proven guilty' - Endpoint connects first, then compliance is assessed
Benefits of Post-Connect Methodology:
According to the documentation:
'The greatest benefit to the post-connect approach is a positive user experience. Unless a system is out of compliance and ends up in a quarantine, your company's users have no idea access controls are even taking place on the network.'
Acceptance Criteria in Post-Connect:
According to the framework:
Corporate Asset Verification- Determines if the endpoint belongs to the organization
Compliance Assessment- Checks for:
Updated antivirus
Patch levels
Disk encryption status
Security tool functionality
If an endpoint fails these criteria, it's placed in quarantine (controlled network access) rather than being completely blocked.
Why Other Options Are Incorrect:
A . 802.1X is a flavor of Post-Connect- 802.1X is a pre-connect access control method (requires authentication before network access)
B . Guilty until proven innocent- This describes pre-connect methodology, not post-connect
D . Used subsequent to pre-connect- While post-connect can follow pre-connect, this doesn't define what post-connect is
E . Assessed for critical compliance before IP address is assigned- This describes pre-connect methodology
Referenced Documentation:
Forescout Blog - Post-Connect Access Controls
Comply-to-Connect Brief - Pre-connect vs Post-connect comparison
Achieving Comply-to-Connect Requirements with Forescout