When you define and enforce the policy, the policy engine triggers the enforcement point to move users that don't meet your NAC policies to a quarantine network. When users are in the quarantine network, unable to work, you have to fix them.
The method of fixing users and allowing them to get back on the network is called remediation.
You can use two types of remediation:
Auto remediation: Remediation happens automatically.
User self-remediation: The endpoint client provides instructions that the user must follow to fix his or her machine.
|