Introduction
Overview
1-9
The following list highlights key features:
■
Enforcement options – NAC 800 provides multiple enforcement
options for quarantining endpoints that do not comply with your
security policy (Inline, DHCP, and 802.1X). This enables NAC 800 to
enforce compliance across complex, heterogeneous networks.
■
High availability and load balancing – A multi-server NAC 800 deploy-
ment is mutually supporting. Should one server fail, other nodes
within a cluster will automatically provide coverage for the affected
network segment.
Load balancing is achieved by an algorithm that spreads the endpoint
testing load across all ESs in a cluster.
■
Multiple-user, role-based access – In enterprise deployments
numerous individuals, each with varying responsibilities, typically
require access to information within NAC 800. Role-based access
enables system administrators to control who has access to the data,
the functions they are allowed to perform, and the information they
can view and act on. Role-based access ensures the integrity of the
enterprise-wide NAC 800 deployment and creates the separation of
duties that conforms to security best-practices.
ActiveX plug-in
• No installation or upgrade to maintain.
• Supports all Windows operating systems.
• Only Internet Explorer application access
required through personal firewall. Must
open port 1500.
• No retesting of endpoint once browser is
closed.
• Not supported by non-Windows operating
systems.
• Browser security settings must allow
ActiveX control operation of signed and safe
controls. This is the default for the Internet
zone. Raise the Internet zone setting and
make
NAC 800
part of the trusted zone.
• Requires interaction from end-users—they
must download the control before they can
access network.
ProCurve NAC EI
Agent
• Always available for retesting.
• The agent is automatically updated with
product updates.
• Supports all Windows platforms.
• Install and upgrade to maintain.
• Requires one-time interaction from end-
users—they must download and install
before they can access network.
Test method
Trade-offs
Pros
Cons
Table 1-1.
Test Methods (cont.)
Содержание 800 Series
Страница 1: ...Users Guide www procurve com ProCurve Network Access Controller 800 ...
Страница 2: ......
Страница 3: ...ProCurve Network Access Controller 800 Release 1 1 Users Guide ...
Страница 32: ...Introduction Technical Support 1 14 Technical Support Technical support is available through www procurve com ...
Страница 43: ...2 1 2 Clusters and Servers Chapter Contents Overview 2 2 Installation Examples 2 3 ...
Страница 70: ...System Configuration Management Server 3 22 Figure 3 9 System Configuration Management Server ...
Страница 79: ...System Configuration User Accounts 3 31 Figure 3 12 System Configuration User Accounts ...
Страница 87: ...System Configuration User Roles 3 39 Figure 3 16 System Configuration User Roles ...
Страница 170: ...System Configuration Cluster Setting Defaults 3 122 Figure 3 55 System Configuration Agentless Credentials ...
Страница 206: ... This page intentionally left blank ...
Страница 229: ...End user Access Mac OS X Endpoint Settings 5 23 Figure 5 8 Mac System Preferences ...
Страница 262: ... This page intentionally left blank ...
Страница 284: ... This page intentionally left blank ...
Страница 298: ... This page intentionally left blank ...
Страница 299: ...8 1 8 High Availability and Load Balancing Chapter Contents High Availability 8 2 Load Balancing 8 6 ...
Страница 302: ...High Availability and Load Balancing High Availability 8 4 Figure 8 2 DHCP Installation ...
Страница 303: ...High Availability and Load Balancing High Availability 8 5 Figure 8 3 802 1X Installation ...
Страница 305: ...9 1 9 Inline Quarantine Method Chapter Contents Inline 9 2 ...
Страница 308: ... This page intentionally left blank ...
Страница 311: ...DHCP Quarantine Method Overview 10 3 Figure 10 1 DHCP Installation ...
Страница 314: ... This page intentionally left blank ...
Страница 319: ...802 1X Quarantine Method NAC 800 and 802 1X 11 5 Figure 11 2 NAC 800 802 1X Enforcement ...
Страница 320: ...802 1X Quarantine Method NAC 800 and 802 1X 11 6 Figure 11 3 802 1X Communications ...
Страница 376: ... This page intentionally left blank ...
Страница 414: ... This page intentionally left blank ...
Страница 421: ...Reports Viewing Report Details 14 7 Figure 14 3 Test Details Report ...
Страница 474: ... This page intentionally left blank ...
Страница 520: ...Tests Help Security Settings Windows B 34 http www pcworld com article id 112138 article html ...
Страница 526: ... This page intentionally left blank ...
Страница 529: ...Important Browser Settings Pop up Windows C 3 1 Clear the Block Popup Windows check box 2 Close the Content window ...
Страница 556: ... This page intentionally left blank ...
Страница 584: ... This page intentionally left blank ...
Страница 585: ......
Страница 586: ... Copyright 2007 2008 Hewlett Packard Development Company L P June 2008 Manual Part Number 5991 8571 ...