The IC6500 FIPS Unified Access Control Appliance is built to meet the needs of the most demanding and complex government agencies and secure enterprise environments. A next generation hardened, centralized policy management server, it provides the same functionality found on the Juniper Networks IC6500 UAC Appliance, delivering superior scalability, performance, and redundancy. The IC6500 FIPS UAC Appliance adds a dedicated FIPS 140-2 Level 3 certified hardware security module to handle all cryptographic operations. It also includes tamper evident labels which can deter physical security breaches and provide a visual indication of device integrity. The IC6500 FIPS offers redundant, field-upgradable, high-availability features, including:

• Dual, hot-swappable, mirrored SATA hard drives
• Dual, hot-swappable fans
• Optional hot-swappable power supplies

IC6500 FIPS, through the UAC Agent or UAC agent-less mode, can gather user authentication, endpoint security state, and device location data in order to define dynamic access policies that it distributes to enforcement points across the network. These enforcement points include any vendor-independent 802.1X-enabled access point and switch, such as EX Series Ethernet Switches, and any Juniper Networks firewall platform, including SSG Series Secure Services Gateways and ISG Series Integrated Security Gateways with Intrusion Detection and Prevention, as well as the robust networking and security services of SRX Series Services Gateways.

User session data can be shared between the IC6500 FIPS and SA Series SSL VPN Appliances, enabling the seamless provisioning of SSL VPN user sessions into UAC upon login, or alternatively UAC user sessions into SSL VPN at login. Also, users authenticated to one IC6500 FIPS appliance may, if authorized access resources protected by another IC Series appliance on the network, enabling “follow-me” policies. UAC adopts the TNC standard protocol IF-MAP to enable the federation of user session data, providing users—whether remote or local— with seamless access to corporate resources protected by uniform access control policies through a single login.

Webcasts

• Getting to Know You--Managing Identity and Network Security

The IC6500 FIPS offers the following additional hardware and software options:

• Microsoft SOH Licenses: Addresses the licensing of the Microsoft System Health Agent (SHA)/System Health Verifiers (SHV) and Statement Of Health (SOH) protocols, which are key to supporting the Microsoft Windows SOH and embedded Microsoft Network Access Protection (NAP) Agents through the TNC SOH open, standard protocol.
• IF-MAP Licenses:Leveraging the TNC’s IF-MAP specification, an IC Series Appliance (or IC Series Appliance cluster) operating solely as a MAP server with no additional simultaneous endpoint licenses or OAC-ADD-UAC licenses must have an IF-MAP license installed. An IC Series Appliance (or IC Series Appliance cluster) operating simultaneously as an IC Series Appliance and as a MAP server, with a simultaneous endpoint license or an OAC-ADD-UAC license installed does not require an IF-MAP license.
• Unified Access Control Disaster Recovery (DR) Licenses: UAC Disaster Recovery licenses address disaster situations, but don’t require a permanent purchase of user licenses for disaster contingencies. These licenses also provide the ability to test disaster recovery deployment while providing usage when needed. They are also available for clusters.
• Coordinated Threat Control Licenses: Additional access control and security capabilities are available with Juniper Networks IDP Series Intrusion Detection and Prevention Appliances for coordinated threat control.
• Hot-Swappable Power Supplies: The IC6500 FIPS offers optional dual, hot-swappable power supplies.

Technical Support

• IC6500 Technical Support
• UAC Technical Documentation
• IC Series UAC Appliances Forum
• UAC Software Release Dates and Milestones

Awards and Recognition:

• The Forrester Wave: Network Access Control, Q3 2008 [PDF 509KB]
• MarketScope for Network Access Control, 2008

Certification and Training:

• IC Series - Configuring Unified Access Control
• IC Series UAC Appliances Certification