5 ms·
We do this too, but based on 802.1x certificates. Devices without this don't get access to the internet and are relegated to a closed VLAN. But IME is not need
by GekkePrutser 4y ago
We do this too, but based on 802.1x certificates. Devices without this don't get access to the internet and are relegated to a closed VLAN.
But IME is not needed for this. The certs are issued through windows / mac management systems e.g. SCCM/Intune. They are also dependent on the current security state of the machine (e.g. no EDR installed -> only access to remediation network). Is IME really used in your case?
- Spooky23 4y agoDepends on the requirements. One I set this up years ago and it uses AMT - IME only provides a few functions although I don’t recall exactly what from memory. The key difference is that you can provide a level of assurance and multi-tenant access without an OS. For example you can run a hypervisor on the PC and have a few OS instances running.