Juniper Mist Access Assurance is a cloud-native, identity-based Network Access Control (NAC) solution. Its primary function is to enforce security policies by controlling who and what can connect to the network. It achieves this by authenticating users and devices and then assigning them to specific roles (e.g., Employee, Guest, IoT). These roles are tied to policies that dictate access privileges and network segmentation, often by dynamically assigning users to different VLANs. This ensures that users only have access to the resources appropriate for their role, effectively segmenting traffic and enhancing security.

A. It creates a VPN using an IPsec tunnel.

Mist Access Assurance is a NAC solution for LAN/WLAN access control, not a VPN gateway for creating IPsec tunnels.

B. It monitors network traffic.

While monitoring is part of the broader Mist platform, the specific enforcement action of Access Assurance is policy application, not passive traffic monitoring.

1. Juniper Networks. (2023). Juniper Mist Access Assurance Datasheet. "Mist Access Assurance... uses identity- and policy-based network access control (NAC)... It assigns traffic to the proper network segment without the complexity of traditional NACs."

2. Juniper Mist Documentation. (n.d.). Access Assurance. Retrieved from mist.com/documentation. "Define user roles and associate them with specific network policies. For example, you can create roles like 'Employee,' 'Guest,' or 'Contractor' and assign different levels of access to each."

3. Juniper Mist Documentation. (n.d.). Use Policy to Assign a VLAN. Retrieved from mist.com/documentation. "You can configure a WLAN to use WPA-2/EAP (802.1X) or MPSK to authenticate wireless clients and assign them to different VLANs based on user group attributes."