NAQC solution in Windows Server 2019

Gloria Gu 3,896 Reputation points
2020-07-15T05:34:04.34+00:00

Hello all.

I am trying to implement a NAQC solution in Windows Server 2019 for a VPN service, but I don't see how to configure in the NPS rules the VSA attributes (MS-Quarantine-IPFilter and MS-Quarantine-Session-Timeout).
I've found this URL https://video2.skills-academy.com/en-us/openspecs/windows_protocols/ms-rnap/5f554d20-09aa-4150-90ca-4f48c3896d72 with the Radius standard, but I don't know how to adapt it to NPS. Is there any documentation about it?

Thank for your help !!

Thread source link: https://social.technet.microsoft.com/Forums/en-US/2b35a695-1f72-414a-9c89-346d3e14d6eb/naqc-solution-in-windows-server-2019?forum=winserverNIS

Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
526 questions
0 comments No comments
{count} votes

Accepted answer
  1. Candy Luo 12,686 Reputation points Microsoft Vendor
    2020-07-15T05:58:28.653+00:00

    Hi ,

    Welcome to our new Microsoft Q&A Platform.

    The VSA attributes (MS-Quarantine-IPFilter and MS-Quarantine-Session-Timeout) are configured in connection request policy settings which are a set of properties that are applied to an incoming RADIUS message.

    12374-2.png

    The two attributes could be used when we deploy NAQC, while based on my research, the Network Access Quarantine Control feature is deprecated starting with Windows Server 2012 R2.

    12382-3.png

    For more details, you can refer to the following links:

    https://video2.skills-academy.com/en-us/windows-server/networking/technologies/nps/nps-crp-crpolicies

    https://video2.skills-academy.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn383589(v=ws.11)

    Best Regards,

    Candy

    0 comments No comments

0 additional answers

Sort by: Most helpful