Looking for Vlan isolation with some scenarios

Question

Hello All,
I am in the process of validating NPS and few other product like PacketFence
Whats i interested at most is two scenarios that can do isolation to designated VLAN in tree scenario
First scenario : We have Symantec endpoint protection AV and we would like to have isolation in case of 
client infection
AV not installed
Second scenario: Our organization firewalls have ids Snort based capable of sending syslog alert or SQL log alert, we would like to have   ability to inform some how the nap/nps server with violating IP and have it VLAN isolated.
Third Scenario: unknown device attached to socket wall conf room or somewhere else will be isolated Most of network equipment are based on HP Procurve 2910al ,2920 ,1900 
My question to you NPS experts is possible with given above scenarios?
Please advice
Thanks

Answer 1

Hi talb,
If we only use the build-in SHV in NPS, we can't achieve your goal.
The build-in SHV supports checking of the following items:
Firewall settings
Antivirus settins
Spyware protection settings
Update settings
If you want to customize the NAP, some coding is needed.
For detailed information, please refer to the link below:
https://msdn.microsoft.com/en-us/library/aa369712(VS.85).aspx
Here is the Public API for NAP:
https://msdn.microsoft.com/en-us/library/aa369706(VS.85).aspx
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]