How to set up Lab Machines for use with MetaAccess NAC?

User identity is of the utmost importance when using MetaAccess NAC in a lab environment, which is why the system provides streamlined solutions for both capturing and verifying the identities of both AD/LDAP users and guest users.

To facilitate optimal, secure processes when using MetaAccess NAC in a lab environment with a range of users, please follow the relevant best practice steps below.

Windows and macOS domain machines

1. For these machines, a Policy Group should be created that includes the relevant domain attributes.

• Navigate to your MetaAccess NAC Dashboard>Policies>Group.
• Click the New button in the left-hand panel.
• Fill out the necessary details, then click Apply and Use.

2. Create a new authenticaiton policy for this group and set the Authentication Type to “Every session provided 0 hours have passed”

3. Either the Policy Key must be pre-deployed to distinguish the lab machines from non-domain machines, or the ADConnector must be installed on all domain controllers.
4. Users must log off the desktop at the end of every lab machine session.
5. For guest users, a local machine account should be created that allows access to the desktop.
   • Once logged in, guest users will either need to complete a Self-Registration process, which can be configured via the MetaAccess NAC Dashboard>Configuration>Self-Enrollment Portals>Guest Self-Provisioning Setup, as shown below:

- Or they can log into MetaAccess NAC via a Sponsored Guest Account, or log into the network via the one-click Anonymous Access method. - A startup script can easily be added to the local machine account, that opens a web browser directly onto the appropriate MetaAccess NAC page.

All other devices

1. If these devices are in a dedicated VLAN, the IP Range for that VLAN should be configured as the Qualifier for access.
2. If these devices are not in a dedicated VLAN, a Policy Group that includes MAC addresses for the lab machines should be created.

• Navigate to your MetaAccess NAC Dashboard>Policies>Group.
• Click the New button in the left-hand panel.
• Fill out the necessary details, then click Apply and Use.

3. Create a new authenticaiton policy for this group and set the Authentication Type to “Every session provided 0 hours have passed”

4. A link to the Logout Page will need to be placed on the desktop or home screen.
5. Users will need to click the logout link and log out of MetaAccess NAC at the end of every lab machine session.
6. Guest users will either need to complete a Self-Registration process, which can be configured via the MetaAccess NAC Dashboard>Configuration>Self-Enrollment Portals>Guest Self-Provisioning Setup, as shown below:

7. Or they can log into MetaAccess NAC via a Sponsored Guest Account or log into the network via the one-click Anonymous Access method.