Extreme Networks AG200 User Manual page 202

Quarantined Networks
The following describes the process in more detail:
Access mode (1) overrides the items below it in the previous list (2, 3, and 4). Use the Access mode
●
radio buttons (System monitor>>select a cluster) to act globally on all endpoints in an Enforcement
cluster.
The Temporarily quarantine for/Temporarily grant access for radio buttons (Endpoint
●
activity>>select an endpoint check box>>Change access) override the items below them in the list
(3 and 4).
Use Temporarily quarantine for to temporarily quarantine endpoints that:
Have been designated Always grant access and never test (System configuration>>Exceptions)
■
Are defined in NAC policies and have passed tests
■
Use Temporarily grant access for to allow temporary access to
endpoints that:
Have been designated Always quarantine and never test (System configuration>>Exceptions).
■
Are defined in NAC policies and have failed tests
■
NOTE
Use the Clear temporary access control status radio button to remove the temporary access or temporary quarantine
state enabled by the Temporarily quarantine for/Temporarily grant access for radio buttons.
Endpoint testing exceptions overrides items following it in the list (4). Use Endpoint testing
●
exceptions (System configuration>>Exceptions) to always allow or always quarantine endpoints
that are defined in NAC policies. For example, an NAC policy might have a range of IP addresses
defined for testing, but you want to exclude specific IP addresses within that range from the tests, so
you could specify them here as Always grant access and never test or Always quarantine and
never test.
NOTE
The change access button on the System Configuration>>Endpoint activity window is enabled only when the action
is possible; for example, when an endpoint or endpoints are selected.
202
Sentriant AG Users' Guide, Version 5.0