Quarantined Networks
Endpoint Quarantine Precedence
7-2
Endpoint Quarantine Precedence
Endpoints are quarantined in the following hierarchical order:
1.
Access mode
(normal operation or allow all)
2.
Temporarily quarantine for
/
Temporarily grant access for
radio buttons
3.
Endpoint testing exceptions
(always grant access, always quarantine)
4.
Post-connect
(external quarantine request)
5.
NAC policies
NOTE:
In DHCP mode, if an endpoint with an unsupported OS already has a DHCP-
assigned IP address, NAC 800 cannot affect this endpoint in any way until the
lease on the existing IP address for that endpoint expires. If an endpoint with
an unsupported OS has a static IP address, NAC 800 cannot affect this
endpoint in any way. In both of these cases, the System Monitor window may
show the quarantined icon next to these endpoints; however, if you hover
your mouse over the post-connect service icon, the actual status shows that
the endpoint should be quarantined, but the quarantine action was unsuccess-
ful.
The following describes the process in more detail:
■
Access mode
(1) overrides the items below it in the previous list (2, 3,
4, and 5). Use the
Access mode
radio buttons (
System monitor>>select
a cluster>>Quarantining
) to act globally on all endpoints in an Enforce-
ment cluster.
■
The
Temporarily quarantine for
/
Temporarily grant access for
radio
buttons (
Endpoint activity>>select an endpoint check box>>Change
access
) override the items below them in the list (3, 4, and 5).
•
Use
Temporarily quarantine for
to temporarily quarantine endpoints
that:
–
Have been designated
Whitelist
(
System configuration>>Excep-
tions
)
–
Are defined in NAC policies and have passed tests
•
Use
Temporarily grant access for
to allow temporary access to end-
points that:
–
Have been designated
Blacklist
(
System configuration>>Excep-
tions
).
–
Are defined in NAC policies and have failed tests
Содержание 800 Series
Страница 1: ...Users Guide www procurve com ProCurve Network Access Controller 800 ...
Страница 2: ......
Страница 3: ...ProCurve Network Access Controller 800 Release 1 1 Users Guide ...
Страница 32: ...Introduction Technical Support 1 14 Technical Support Technical support is available through www procurve com ...
Страница 43: ...2 1 2 Clusters and Servers Chapter Contents Overview 2 2 Installation Examples 2 3 ...
Страница 70: ...System Configuration Management Server 3 22 Figure 3 9 System Configuration Management Server ...
Страница 79: ...System Configuration User Accounts 3 31 Figure 3 12 System Configuration User Accounts ...
Страница 87: ...System Configuration User Roles 3 39 Figure 3 16 System Configuration User Roles ...
Страница 170: ...System Configuration Cluster Setting Defaults 3 122 Figure 3 55 System Configuration Agentless Credentials ...
Страница 206: ... This page intentionally left blank ...
Страница 229: ...End user Access Mac OS X Endpoint Settings 5 23 Figure 5 8 Mac System Preferences ...
Страница 262: ... This page intentionally left blank ...
Страница 284: ... This page intentionally left blank ...
Страница 298: ... This page intentionally left blank ...
Страница 299: ...8 1 8 High Availability and Load Balancing Chapter Contents High Availability 8 2 Load Balancing 8 6 ...
Страница 302: ...High Availability and Load Balancing High Availability 8 4 Figure 8 2 DHCP Installation ...
Страница 303: ...High Availability and Load Balancing High Availability 8 5 Figure 8 3 802 1X Installation ...
Страница 305: ...9 1 9 Inline Quarantine Method Chapter Contents Inline 9 2 ...
Страница 308: ... This page intentionally left blank ...
Страница 311: ...DHCP Quarantine Method Overview 10 3 Figure 10 1 DHCP Installation ...
Страница 314: ... This page intentionally left blank ...
Страница 319: ...802 1X Quarantine Method NAC 800 and 802 1X 11 5 Figure 11 2 NAC 800 802 1X Enforcement ...
Страница 320: ...802 1X Quarantine Method NAC 800 and 802 1X 11 6 Figure 11 3 802 1X Communications ...
Страница 376: ... This page intentionally left blank ...
Страница 414: ... This page intentionally left blank ...
Страница 421: ...Reports Viewing Report Details 14 7 Figure 14 3 Test Details Report ...
Страница 474: ... This page intentionally left blank ...
Страница 520: ...Tests Help Security Settings Windows B 34 http www pcworld com article id 112138 article html ...
Страница 526: ... This page intentionally left blank ...
Страница 529: ...Important Browser Settings Pop up Windows C 3 1 Clear the Block Popup Windows check box 2 Close the Content window ...
Страница 556: ... This page intentionally left blank ...
Страница 584: ... This page intentionally left blank ...
Страница 585: ......
Страница 586: ... Copyright 2007 2008 Hewlett Packard Development Company L P June 2008 Manual Part Number 5991 8571 ...