ESCARE PowerPack
This guide provides the configuration method for performing the integration function between ESCARE PowerPack and Genian NAC, a network access control system. (ESCARE PowerPack is an export approval and media usage approval solution exclusively integrated with Symantec DLP or Symantec SEP solutions.)
Overview
Before integration between Genian NAC and PowerPack products, users experienced inconvenience performing separate user authentication for each product. However, after integration, SSO is implemented between the two products, so when a user performs user authentication for PowerPack, user authentication is automatically processed in Genian NAC.
The Genian NAC agent is configured to apply authentication replacement for PowerPack. For user authentication, the Genian NAC agent checks the user authentication status with the PowerPack server via the PowerPack agent, allowing network utilization in a normal authenticated state. Through this process, users are provided the convenience of performing the login process for both products with just one login.
Recommended Versions
| Product Name (Component) | Version | Notes |
|---|---|---|
| Genian NAC (Policy Server) | V4.0 | Release version after 2019.06 |
| Genian NAC (Agent) | V4.0 | Release version after 2019.06 |
| PowerPack | Release version after 2019.06 |
Purpose of Integration
The integration of Genian NAC and ESCARE PowerPack provides the following effects: SSO Environment Provision
- The user first proceeds with user authentication in PowerPack, and Genian NAC user authentication is automatically performed through Genian NAC agent plugin integration.
Genian NAC replaces user authentication in Genian NAC based on PowerPack's user authentication status, thereby configuring an SSO environment. Automatic Connection to Network Blocking Reason and Guide Page for Unauthenticated PowerPack Users
- Genian NAC informs unauthenticated PowerPack users of the reason for network blocking and provides a guide page on how to take action for normal network usage.
Prerequisites
- Prepare Genian NAC Agent Plugin for Integration
- Genian NAC utilizes a specially developed Genian NAC agent plugin for implementing user authentication integration to achieve SSO with PowerPack. The plugin information is as follows:
| Genian NAC Agent Plugin File Name | Notes |
|---|---|
| NAC-C_PowerPackSSO-R-89874-1.0.8.gpf (detailed version may vary) | Genian NAC Agent V4.0 (Release version after 2019.06) |
- Confirm PowerPack's Library Path and File Name for Calling Authentication Information
- When integrating with PowerPack, Genian NAC utilizes PowerPack's library for calling authentication information to perform user authentication replacement.
The default path where PowerPack's library is stored is C:\ProgramData\scEscpp\ and the file name is scEscppInfo.dll. Although PowerPack's library path and file name are set by default in Genian NAC's specially developed agent plugin,
if they have been exceptionally changed by the customer, please confirm the path and file name, then proceed after changing the setting values in Genian NAC Configuration for Integration > Step 2: Agent Plugin Configuration > No. 3 item.
Genian NAC Configuration for Integration
This section covers only the minimum necessary Genian NAC settings for integration with PowerPack. Perform this operation only once; it will be automatically applied thereafter.
- Step 1: Upload Agent Plugin for Integration
- In Genian NAC Web Console, go to System > Update > Genian Software > Agent Plugin menu
- Click Tasks > Upload Plugins > Select File button to select NAC-C_PowerPackSSO-R-89874-1.0.8.gpf plugin to upload
- Click Upload button
- Step 2: Agent Plugin Configuration
- In Genian NAC Web Console, go to Policy > Node Policy > Agent Action menu
- Click PowerPack Alternative Authentication plugin
- In Action Execution Settings, enter setting values as follows
Configuration Item Setting Value Notes Library Path Selectbox: %SystemDrive%/ Input value: \ProgramData\scEscpp\scEscppInfo.dllConfigure PowerPack's library path and library file name Apply Changed User Information Select from On,OffOnoption means after login, Genian NAC continuously verifies authentication information and status with PowerPack. If authentication information changes in PowerPack, it reflects the changed information to maintain Genian NAC's authentication status and processes logout in Genian NAC if logged out from PowerPackOffoption means after the initial SSO login, it does not further share authentication information with PowerPack and follows Genian NAC's authentication renewal cycle- Step 3: Configure Node Policy for Integration Function Application
Through the following process, using Genian NAC's agent plugin, after confirming normal communication for authentication between the user PC and the server and verifying user authentication status, create a policy to allow network access.
- In Genian NAC Web Console, go to Policy > Node Policy menu
- Click the Node Policy containing the node group (e.g., all nodes) to which user authentication integration will be applied (if applying to a specific group only, create and use a separate node group)
- Go to Advanced > Authentication Policy > Single Sign-On Method and select External API from the select box
- Go to Agent Action at the bottom and click Assign button
- Move PowerPack Alternative Authentication node action to the right and click Add button
- Click Update button at the bottom
- Click Apply Change Policy button at the top right to apply policy