HP 800 Series, User Manual, Page: 214 / 586

End-user Access
Firewall Settings
5-8
Firewall Settings
NAC 800 can perform tests through firewalls on both managed and unmanaged
endpoints.
Managed Endpoints
Typically, a managed endpoint’s firewall is controlled with the Domain Group
Policy for Windows, or a central policy manager for other firewalls. In this
case, the network administrator opens up the agent port or agentless ports
only to the NAC 800 server using the centralized policy.
If the Domain Group Policy is not used for Windows endpoints, the appropri-
ate ports are opened during the agent installation process by the NAC 800
installer.
Unmanaged Endpoints
For unmanaged endpoints, the NAC Agent and the ActiveX control test
methods automatically open the necessary ports for testing.
End-users connecting with Windows XP, but a non-SP2 firewall (such as
Norton) must configure that firewall to allow connection to NAC 800 on port
1500, or the installation of the agent fails.
Making Changes to the Firewall
See the following sections for instructions:
■ “Allowing the Windows RPC Service through the Firewall” on page 5-
18
■
“Allowing NAC 800 through the OS X Firewall” on page 5-22