The IC6500 Unified Access Control Appliance is the next generation of hardened, centralized network access policy management servers, delivering scalability, performance, and redundancy.

Designed to address the network access needs of large multi-national organizations and government agencies, the IC6500 network access server scales to support up to 15,000 simultaneous endpoint devices. This network access server can be deployed standalone or in three-unit clusters to increase performance and provide additional scalability, supporting up to 30,000 simultaneous endpoint devices. The IC6500 network access server includes redundant, field-upgradable, high-availability features, including:

• Dual, hot-swappable, mirrored SATA hard drives
• Dual, hot-swappable fans
• Optional hot-swappable power supplies

The IC6500 network access server, through the UAC Agent or UAC agent-less mode, can gather user authentication, endpoint security state, and device location data, in order to define dynamic network access policies that it distributes to enforcement points across the network. These network access enforcement points can include any vendor-independent 802.1X-enabled access point and switch, such as EX Series Ethernet Switches, and any Juniper Networks firewall platform, including SSG Series Secure Services Gateways and ISG Series Integrated Security Gateways with Intrusion Detection and Prevention, as well as the robust networking and security services of SRX Series Services Gateways.

User session data can be shared between the IC6500 and SA Series SSL VPN Appliances, enabling the seamless provisioning of SSL VPN user sessions into UAC upon login, or alternatively UAC user sessions into SSL VPN at login. Also, users authenticated to one IC6500 may, if authorized access resources protected by another IC Series appliance on the network, enabling "follow-me" policies. UAC leverages the TNC standard protocol IF-MAP to enable this federation of user session data, providing users—whether remote or local— with seamless access to corporate resources protected by uniform network access control policies through a single login.

Webcasts

• Getting to Know You—Managing Identity and Network Security

The IC6500 offers the following additional hardware and software options:

• Microsoft SOH Licenses: Addresses the licensing of the Microsoft System Health Agent (SHA)/System Health Verifiers (SHV) and Statement Of Health (SOH) protocols, which are key to supporting the Microsoft Windows SOH and embedded Microsoft Network Access Protection (NAP) Agents through the TNC SOH open, standard protocol.
• IF-MAP Licenses: Leveraging the TNC's IF-MAP specification, an IC Series Appliance (or IC Series Appliance cluster) operating solely as a MAP server with no additional simultaneous endpoint licenses or OAC-ADD-UAC licenses must have an IF-MAP license installed. An IC Series Appliance (or IC Series Appliance cluster) operating simultaneously as an IC Series Appliance and as a MAP server, with a simultaneous endpoint license or an OAC-ADD-UAC license installed does not require an IF-MAP license.
• Unified Access Control Disaster Recovery (DR) Licenses: UAC Disaster Recovery licenses address disaster situations, but don't require a permanent purchase of user licenses for disaster contingencies. These licenses also provide the ability to test disaster recovery deployment while providing usage when needed. They are also available for clusters.
• Coordinated Threat Control Licenses: Additional access control and security capabilities are available with Juniper Networks IDP Series Intrusion Detection and Prevention Appliances for coordinated threat control.
• Hot-Swappable Power Supplies: The IC6500 offers optional dual, hot-swappable power supplies.

Technical Support:

• IC6500 Technical Support
• UAC Technical Documentation
• IC Series UAC Appliances Forum
• UAC Software Release Dates and Milestones

Awards and Recognition:

• The Forrester Wave: Network Access Control, Q3 2008 [PDF 509KB]
• MarketScope for Network Access Control, 2008

Certification and Training:

• IC Series UAC Appliances Technical Education
• IC Series UAC Appliances Certification
• Configuring Unified Access Control
• UAC Certification Track