Boarding states are typically defined in network security policies and implemented using network access control (NAC) systems. NAC systems dynamically evaluate the security posture of devices attempting to connect to the network and enforce appropriate security measures based on the device's boarding state.
Common boarding states include:
1. Unauthorized: This is the initial state where a device is not yet authorized to access the network. Typically, devices in this state are not allowed to communicate with any resources on the network.
2. Pending Authorization: In this state, a device has submitted a request for network access but is waiting for authorization. The NAC system may perform various security checks, such as device fingerprinting and vulnerability assessment, before granting access.
3. Authorized: Once a device has successfully passed the security checks, it enters the authorized state. This allows the device to communicate with other authorized devices and access network resources based on the policies defined for its user group or device type.
4. Quarantined: In some cases, a device may be placed in a quarantined state if it fails to meet certain security requirements. While quarantined, the device may have limited or no access to network resources and may be required to undergo additional security measures or remediation steps before being fully authorized.
5. Revoked: If a device's security posture changes or it violates network security policies, its authorization may be revoked. In this state, the device is denied access to the network until it meets the required security criteria.
Boarding states help organizations effectively manage network access, enforce security policies, and protect against potential threats by controlling the onboarding process of devices onto the network.