Extreme Networks AG200 User Manual page 28

Introduction
Table 2: Test Methods (continued)
Test method
ActiveX plug-in
Sentriant AG
Agent
The following list highlights key features:
Enforcement options—Sentriant AG provides multiple enforcement options for quarantining
●
endpoints that do not comply with your security policy (Inline, DHCP, and 802.1X). This enables
Sentriant AG to enforce compliance across complex, heterogeneous networks.
High availability and load balancing—A multi-server Sentriant AG deployment is mutually
●
supporting. Should one server fail, other nodes within a cluster will automatically provide coverage
for the affected network segment.
Load balancing is achieved by an algorithm that spreads the endpoint testing load across all ESs in a
cluster.
Multiple-user, role-based access—In enterprise deployments numerous individuals, each with
●
varying responsibilities, typically require access to information within Sentriant AG. Role-based
access enables system administrators to control who has access to the data, the functions they are
allowed to perform, and the information they can view and act on. Role-based access ensures the
integrity of the enterprise-wide Sentriant AG deployment and creates the separation of duties that
conforms to security best-practices.
Extensible—Sentriant AG's easy-to-use open API allows administrators to create custom tests for
●
meeting unique organizational requirements. The API is fully exposed and thoroughly documented.
Custom tests are created using scripts and can be seamlessly added to existing policies.
Compatible with existing heterogeneous network infrastructure—No upgrades to your existing
●
network infrastructure are required.
Variety of enforcement options—Permit, deny, or quarantine based on test results.
●
28
Trade-offs
Pros
• No installation or upgrade to
maintain.
• Supports all Windows operating
systems.
• Only Internet Explorer application
access required through personal
firewall. Must open port 1500.
• Always available for retesting.
• The agent is automatically updated
with product updates.
• Supports all Windows platforms.
Cons
• No retesting of endpoint once
browser is closed.
• Not supported by non-Windows
operating systems.
• Browser security settings must allow
ActiveX control operation of signed
and safe controls. This is the
default for the Internet zone. Raise
the Internet zone setting and make
part of the trusted
Sentriant AG
zone.
• Requires interaction from
end-users—they must download the
control before they can access
network.
• Install and upgrade to maintain.
• Requires one-time interaction from
end-users—they must download and
install before they can access
network.
Sentriant AG Users' Guide, Version 5.0