Exordos NAC#

Exordos NAC binds a registered device identity to a network address, evaluates its access policy and sends short-lived grants to a Linux gateway. The gateway applies those grants to forwarded traffic with nftables. VPN and wireless connectivity remain the responsibility of the existing network infrastructure.

Documentation#

• Architecture — components, trust boundaries, policy and network requirements.
• Protocol — broker and agent API, certificates, errors and attestation.
• Deployment — broker, enforcement gateway, device enrollment and initial verification.
• Operations — device lifecycle, access changes, recovery, updates and retirement after installation.
• Maintenance — release rollout, broker backups, upgrades and retention.
• Verification — test suites and integration stands.
• macOS — Secure Enclave identity and platform-specific deployment constraints.

Repositories#