Firewall Settings; Managed Endpoints; Unmanaged Endpoints; Making Changes To The Firewall - HP 800 User Manual

End-user Access

Firewall Settings

5-8

Firewall Settings

NAC 800 can perform tests through firewalls on both managed and unmanaged
endpoints.

Managed Endpoints

Typically, a managed endpoint's firewall is controlled with the Domain Group
Policy for Windows, or a central policy manager for other firewalls. In this
case, the network administrator opens up the agent port or agentless ports
only to the NAC 800 server using the centralized policy.
If the Domain Group Policy is not used for Windows endpoints, the appropri-
ate ports are opened during the agent installation process by the NAC 800
installer.

Unmanaged Endpoints

For unmanaged endpoints, the NAC Agent and the ActiveX control test
methods automatically open the necessary ports for testing.
End-users connecting with Windows XP, but a non-SP2 firewall (such as
Norton) must configure that firewall to allow connection to NAC 800 on port
1500, or the installation of the agent fails.

Making Changes to the Firewall

See the following sections for instructions:
"Allowing the Windows RPC Service through the Firewall" on page 5-
■
18
■ "Allowing NAC 800 through the OS X Firewall" on page 5-22