diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-01.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-01.png new file mode 100644 index 00000000..5a5bb7a3 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-01.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-02.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-02.png new file mode 100644 index 00000000..3859bcfe Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-02.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-03.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-03.png new file mode 100644 index 00000000..20db14d6 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-03.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-04.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-04.png new file mode 100644 index 00000000..37654da7 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-04.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-05.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-05.png new file mode 100644 index 00000000..b9ae160c Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-05.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-06.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-06.png new file mode 100644 index 00000000..ea9af1c1 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-06.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-07.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-07.png new file mode 100644 index 00000000..ef10ed9a Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-07.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-08.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-08.png new file mode 100644 index 00000000..a6d6de86 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-08.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-09.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-09.png new file mode 100644 index 00000000..3bd57602 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-09.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-10.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-10.png new file mode 100644 index 00000000..0ccaacf5 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-10.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-11.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-11.png new file mode 100644 index 00000000..c09d5246 Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-11.png differ diff --git a/public/docs-static/img/how-to-guides/posture-checks/posture-checks-12.png b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-12.png new file mode 100644 index 00000000..d330872c Binary files /dev/null and b/public/docs-static/img/how-to-guides/posture-checks/posture-checks-12.png differ diff --git a/src/pages/how-to/posture-checks.mdx b/src/pages/how-to/posture-checks.mdx new file mode 100644 index 00000000..6de143f1 --- /dev/null +++ b/src/pages/how-to/posture-checks.mdx @@ -0,0 +1,97 @@ +# NetBird Posture Checks: Access Control for Modern Organizations + +Today, organizations face the critical challenge of maintaining robust access control across their IT infrastructure. As networks grow more complex and threats become increasingly sophisticated, traditional access control methods often fall short, leaving businesses vulnerable to security breaches and operational inefficiencies. + +Key challenges include: + +* Dynamic infrastructures +* Need for granular control +* Scalability issues + +NetBird's Posture Checks feature offers: + +* Adaptive, context-aware access +* Highly granular policies +* Effortless scalability + +This solution enhances security and efficiency by: + +* Reducing unauthorized access risk +* Automating policy-based control +* Enabling business agility + +Let's delve into the details of how [NetBird's Posture Checks](https://docs.netbird.io/how-to/manage-posture-checks) feature transforms access control, making it more secure, efficient, and adaptable for modern enterprises. + +## Understanding NetBird Posture Checks + +Posture Checks is a security feature [available from the Business plan onwards](https://netbird.io/pricing) that enhances network protection by implementing automated assessments of a device's security status before granting network access, thus ensuring that only compliant devices can access your network resources. + +In this regard, NetBird posture checks verify various aspects of a connecting device, offering granular control over network access. These checks include **verifying the NetBird client version**, allowing you to restrict access to peers with specific versions of the client software. Additionally, you can implement **geographical restrictions** based on country or region, giving you control over where connections can originate from. + +The feature also allows for network-level restrictions by enabling you to **allow or block specific peer network ranges**. Furthermore, you can set constraints based on the operating system of the connecting device, **ensuring that only approved OS versions can gain access**. For an even more detailed level of control, Posture Checks can examine the running processes on a peer device, **allowing or denying access based on the presence of specific applications or services**. + +By using these diverse checking capabilities, NetBird empowers you to create a robust and finely-tuned security posture for your network, significantly reducing the risk of unauthorized access and potential security breaches. + +## Setting Up Posture Checks + +Setting up posture checks in NetBird is straightforward: + +Log in to your NetBird dashboard and navigate to `Posture Checks` in the left menu. Click `Create Posture Check` or edit an existing one. + +![NetBird Posture Checks](/NetBird/Posture%20Checks/assets/posture-checks-01.png) + +A pop-up window will open with two tabs: `Checks` and `Name & Description`. + +![Create Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-02.png) + +From here, you can [manage access with posture checks](https://docs.netbird.io/how-to/manage-posture-checks) based on several aspects: + +**NetBird Client Version**: Restrict access to peers with specific NetBird client versions, thus ensuring that all devices connecting to the network use up-to-date, secure client software. + +![NetBird Client Version Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-03.png) + +**Country and Region**: Limit network access based on geographical location, helping comply with data regulations or restrict access from high-risk areas. Note that you have two tabs available for this: `Allow` (green) and `Block` (red), making it easy to set up your preferred access rules.. + +![Country and Region Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-04.png) + +**Peer Network Range**: This posture check lets you precisely control network access by specifying which IP ranges can connect to your network. You can create policies allowing only connections from approved locations, such as office networks or trusted remote work setups. Additionally, you can enhance security by blocking high-risk IP ranges working in tandem with geo-based posture checks. This granular control helps create a more secure network environment by limiting access to known, trusted sources while preventing connections from potentially risky or unauthorized IP addresses. + +![Peer Network Range Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-05.png) + +**Operating System**: Restrict access based on the connecting device's OS, ensuring only approved and potentially more secure operating systems can connect. + +![Operating System Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-06.png) + +**Process**: [Limit network access based on specific applications or services running on the connecting device](https://netbird.io/knowledge-hub/limit-network-access-based-on-running-processes). By verifying specific applications or processes, you ensure that only devices running essential security software, such as antivirus, firewalls, or endpoint protection agents, can connect to your network, reducing the risk of malware entering your network through unprotected devices. It also aids in maintaining compliance with regulatory requirements by enforcing consistent security measures across all devices. + +Furthermore, this process-based posture check allows you to create specific policies for different user groups or network segments based on their unique security needs. Working in conjunction with other posture checks in NetBird, this setting offers a comprehensive and user-friendly approach to network security. + +![Process Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-07.png) + +After enabling the desired posture check, go to the `Name & Description` tab. Here, enter a descriptive name for your newly created posture check and save it. + +![Name your Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-08.png) + +You'll notice a gray dot to the left of the posture check name, indicating it's inactive. To activate the posture check, you need to link it to an access control policy. + +![New Posture Check](/NetBird/Posture%20Checks/assets/posture-checks-09.png) + +To apply a posture check: + +* [Create or edit an access control policy](https://docs.netbird.io/how-to/manage-network-access). +* Find the `Posture Checks` tab within the policy settings. +* Choose `Browse Checks` to select an existing check or `New Posture Check` to create one. + +Note that you can add multiple posture checks to a single policy as needed for comprehensive security. + +![Add Posture Check to Access Control Policy](/NetBird/Posture%20Checks/assets/posture-checks-10.png) + +After adding the posture check, it will appear in the `POSTURE CHECKS` column. For easy management, you can click on it to edit the access control policy, allowing you to add or remove posture checks as needed. + +![Access Control Policies Dashboard](/NetBird/Posture%20Checks/assets/posture-checks-11.png) + +If you revisit the `Posture Checks` dashboard, you'll notice a green dot next to your recently configured posture check. This color shift indicates that the posture check is now active and integrated into your network security framework, actively contributing to your system's protection. + +![Posture Checks Dashboard](/NetBird/Posture%20Checks/assets/posture-checks-12.png) + +Following these steps, you can effectively implement and manage NetBird's Posture Checks, significantly enhancing your network's security posture. \ No newline at end of file