The IC4500 Unified Access Control Appliance is the next generation of hardened, centralized policy management servers, delivering scalability and performance.

Designed to address the needs of medium-size to large organizations and remote and branch offices, the IC4500 scales to support from 25 to 5,000 simultaneous endpoint devices, and can be deployed standalone or in cluster pairs for high availability.

The IC4500, through the UAC Agent or UAC agent-less mode, can gather user authentication, endpoint security state, and device location data in order to implement dynamic access and security policies that it distributes to enforcement points across the network. These enforcement points can include any vendor-independent 802.1X-enabled access point and switch, such as EX Series Ethernet Switches, and any Juniper Networks firewall platform, including SSG Series Secure Services Gateways and ISG Series Integrated Security Gateways with Intrusion Detection and Prevention, as well as the robust networking and security services of SRX Series Services Gateways.

User session data can be shared between the IC4500 and SA Series SSL VPN Appliances, enabling the seamless provisioning of SSL VPN user sessions into UAC upon login, or alternatively UAC user sessions into SSL VPN at login. Also, users authenticated to one IC4500 may, if authorized access resources protected by another IC Series appliance on the network, enabling “follow-me” policies. UAC leverages the TNC standard protocol IF-MAP to enable this federation of user session data, providing users—whether remote or local— with seamless access to corporate resources protected by uniform access control policies through a single login.

Webcasts

• Getting to Know You--Managing Identity and Network Security

The IC4500 offers the following additional hardware and software options:

• Microsoft SOH Licenses: Addresses the licensing of the Microsoft System Health Agent (SHA)/System Health Verifiers (SHV) and Statement Of Health (SOH) protocols, which are key to supporting the Microsoft Windows SOH and embedded Microsoft Network Access Protection (NAP) Agents through the TNC SOH open, standard protocol.
• IF-MAP Licenses: Leveraging the TNC’s IF-MAP specification, an IC Series Appliance (or IC Series Appliance cluster) operating solely as a MAP server with no additional simultaneous endpoint licenses or OAC-ADD-UAC licenses must have an IF-MAP license installed. An IC Series Appliance (or IC Series Appliance cluster) operating simultaneously as an IC Series Appliance and as a MAP server, with a simultaneous endpoint license or an OAC-ADD-UAC license installed does not require an IF-MAP license.
• Unified Access Control Disaster Recovery (DR) Licenses: UAC Disaster Recovery licenses address disaster situations, but don’t require a permanent purchase of user licenses for disaster contingencies. These licenses also provide the ability to test disaster recovery deployment while providing usage when needed. They are also available for clusters.
• Coordinated Threat Control Licenses: Additional access control and security capabilities are available with Juniper Networks IDP Series Intrusion Detection and Prevention Appliances for coordinated threat control.

Technical Support:

• IC4500 Technical Support
• UAC Technical Documentation
• IC Series UAC Appliances Forum
• UAC Software Release Dates and Milestones

Awards and Recognition:

• The Forrester Wave: Network Access Control, Q3 2008 [PDF 509KB]
• MarketScope for Network Access Control, 2008

Certification and Training:

• IC Series UAC Appliances Technical Education
• IC Series UAC Appliances Certification
• Configuring Unified Access Control
• UAC Certification Track