Uses the Symantec Enforcer appliances and integrated software Enforcers to enable you to control network access. Network-based enforcement authenticates and allows network access only to the clients that meet the requirements in the Host Integrity policy.
If your deployment includes a Gateway Enforcer appliance, you can allow guests without compliant software to access your network temporarily. These Enforcers enable guest access by installing On-Demand clients on guest computers and dissolving them when guests log off.
If you want to demo all these functions, you require an Enforcer appliance in theory. But, you can install the Gateway Enforcer in ESXi for demo.
Here are the steps to install the Gateway Enforcer in ESXi:
1. Log into the ESXi host by vSphere client, choose 'Configuration' tab of the ESXi host, then select 'Networking' to add a new networking:
2. Choose 'Create a vSphere standard switch', and don't select any adapter for this vSwitch:
3. Input label for this vSwitch as 'Gateway Enforcer':
4. After the vSwitch added, click 'Properties' of this vSwitch:
5. For the properties of the vSwitch, choose to enable 'Promiscuous Mode':
6. Create a new virtual machine in the ESXi, select the guset OS as 'Red Hat Enterprise Linux 4 (32bit)':
7. For the network connection of this virtual machine, select 2 NIC and choose 'Gateway Enforcer' for NIC 2:
8. Mount the ISO of the enfoecer to install Gateway Enforcer. For the steps, please refer to the Implementation_Guide_SEP12.1.pdf
9. Create a new virtual machine as a client, select the Network Label as 'Gateway Enforcer':
10. So, the client VM is connected to the Gateway Enforcer VM. If there is no SEP client installed inside the client VM, the page will be re-directed to the remediation server when accessing the internet:
DONE. Then you can use this environment to demo the basic functions of Gateway Enforcer.