Novell ZENworks Network Access Control 5.0, User Manual

Page: 218 / 534

218 Novell ZENworks Network Access Control Users Guide
no
vd
ocx
(e
n)
24
Ma
rch 20
09
The following describes the process in more detail:
Š Access mode
(1) overrides the items below it in the previous list (2, 3, 4, and 5). Use the
Access mode
radio buttons (
System monitor>>select a
cluster>>Quarantining
) to act globally on all endpoints in an Enforcement cluster.
Š
The
Temporarily quarantine for
/
Temporarily grant access for
radio
buttons (
Endpoint activity>>select an endpoint check box>>Change
access
) override the items below them in the list (3, 4, and 5).
Š
Use
Temporarily quarantine for
to temporarily quarantine endpoints that:
Š
Have been designated
Whitelist
(
System configuration>>Exceptions
)
Š
Are defined in NAC policies and have passed tests
Š
Use
Temporarily grant access for
to allow temporary access to endpoints that:
Š
Have been designated
Blacklist
(
System configuration>>Exceptions
).
Š
Are defined in NAC policies and have failed tests
TIP: Use the Clear temporary access control status radio button to remove the temporary access or
temporary quarantine state enabled by the Temporarily quarantine for/Temporarily grant access for
radio buttons.
Š
Endpoint testing exceptions
overrides items following it in the list (4, and 5). Use
Endpoint testing exceptions
(
System configuration>>Exceptions
) to
always allow or always quarantine endpoints that are defined in NAC policies. For example, a
NAC policy might have a range of IP addresses defined for testing, but you want to exclude
specific IP addresses within that range from the tests, so you could specify them here as
Whitelist
or
Blacklist
.
Š Post-connect
overrides the item following it in the list (5).
TIP: The change access button on the System Configuration>>Endpoint activity window is enabled
only when the action is possible; for example, when an endpoint or endpoints are selected.
7.2 Using Ports in Accessible Services and
Endpoints
To use a port number when specifying accessible services and endpoints (cluster
default):
Home window>>System configuration>>Accessible services