ProCurve 800, Configuration Manual, Page: 25 / 406

1-13
Overview of the ProCurve NAC 800
Server Types
The MS handles these system-wide settings:
■
Endpoint integrity licenses
■
Connection to the Internet
■
Clock —The MS can use its internal clock or act as a Network Time
Protocol (NTP) client and receive its clock from an NTP server. The MS
is the NTP server for all of its ESs.
■
Software upgrades
—The MS downloads new software; it upgrades first
itself and then all ESs.
■
Test updates
—The MS (if properly licensed) automatically checks for
and downloads test updates at the frequency you specify.
■
NAC policies —The MS stores the list of tests that the ESs run on
endpoints, as well as other properties related to those tests.
■
Post-connect testing —The MS stores the settings for any post-connect
services (such as an IDS/IPS) that you define. The MS also receives testing
results and log information from the post-connect services.
The MS stores these settings and configures them on its ESs:
■
Individual ES settings :
• IP address
• Hostname
• Root password (allows access to the ES’s OS)
• Time zone
■
Quarantining settings
The MS also serves as the repository for information collected about end-
points throughout the network. In the MS Web browser interface, you can:
■
Track:
• Detected endpoints
• Endpoint activity:
–
Endpoints’ access control status
– Endpoints’ test status
■
Change endpoints access control status
■
Generate reports