HP ProCurve NAC 800, User Manual

Page: 160 / 591

System Configuration
Cluster Setting Defaults
3-112
2. If no agent is available, NAC 800 tries to test with the ActiveX test method.
3. If ActiveX is not available and if credentials for the endpoint or domain
exist, NAC 800 tries to test with the agentless test method.
4. If the endpoint can not be tested transparently, then NAC 800 uses the
end-user access screens to set up a test method and sequence for
interacting with the end-user. This order of presentation is defined on the
Testing methods
window.
At least one testing method is required. When testing an endpoint, the end-
user screen presented first, is the one that is selected as first here. If this
method fails due to a personal firewall or other problem, the second method
selected here is presented to the end-user if one has been selected. Finally, if
a third method has been selected, it will be presented to the end-user if the
second method fails. These system-level settings may be overridden and
customized for each cluster.
To order test methods:
Home window>>System configuration>>Testing methods
1. For each test method selected in step 1, Use the arrows next to the testing
method name to move the testing methods up or down in the selection
order. The order of the testing methods determines the order in which the
testing should proceed.
2. Click
ok
.
Recommended Test Methods
Agentless testing is not recommended as the first test method to be used for
testing on domains other than your Windows domain for the following rea-
sons:
■ Many times guest users do not know the username and password to
their machine if they are automatically logged in
■
If the end-user is not on a Windows domain they have to change the
“Network access... Classic mode” setting
■ The user they log in as has to have certain permissions to resources
on the system which they may not have
■
A guest user may be uncomfortable supplying their Windows user-
name and password to an unknown system