18.3. Endpoint Integrity

Endpoint integrity is known by several marketing names — host checking, endpoint security, endpoint verification, and so on.

Despite the variety of names, most NAC solutions use a fairly similar feature set for endpoint integrity. Endpoint integrity is the process by which it scans endpoint devices (such as PCs and laptops) to determine whether those devices have the appropriate endpoint security applications installed and running.

The requirements of a particular organization in this regard can range from simple scans, such as ensuring that a device has an antivirus application up to date and running, to more custom types of scans, such as ensuring that a device has a particular homegrown application installed and running.

Chapter 9 talks about endpoint integrity.