NAQC solution in Windows Server 2019

Question

Hello all.

I am trying to implement a NAQC solution in Windows Server 2019 for a VPN service, but I don't see how to configure in the NPS rules the VSA attributes (MS-Quarantine-IPFilter and MS-Quarantine-Session-Timeout).
I've found this URL https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rnap/5f554d20-09aa-4150-90ca-4f48c3896d72 with the Radius standard, but I don't know how to adapt it to NPS. Is there any documentation about it?

Thank for your help !!

Thread source link: https://social.technet.microsoft.com/Forums/en-US/2b35a695-1f72-414a-9c89-346d3e14d6eb/naqc-solution-in-windows-server-2019?forum=winserverNIS

Answer 1

Hi ,

Welcome to our new Microsoft Q&A Platform.

The VSA attributes (MS-Quarantine-IPFilter and MS-Quarantine-Session-Timeout) are configured in connection request policy settings which are a set of properties that are applied to an incoming RADIUS message.

The two attributes could be used when we deploy NAQC, while based on my research, the Network Access Quarantine Control feature is deprecated starting with Windows Server 2012 R2.

For more details, you can refer to the following links:

https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-crp-crpolicies

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn383589(v=ws.11)

Best Regards,

Candy