System Settings; Matching Windows Domain Policies To Nac Policies - Extreme Networks AG200 User Manual

NOTE
Your outbound SSL connection needs to access:
For license validation and test updates:
http://update.sentriantag.extremenetworks.com port 443
For software and operating system updates
http://download.sentriantag.extremenetworks.com (216.183.121.206) port 80

System Settings

Matching Windows Domain Policies to NAC Policies

Using a Windows domain might affect the end-user's ability to change their system configuration to
pass the tests. For example, in a corporate environment, each machine gets their domain information
from the domain controller, and the user is not allowed to change any of the related settings, such as
receiving automatic updates and other IE security settings.
The Sentriant AG administrator needs to make sure the global policy on their network matches the
NAC policy defined, or skip the test.
For example, if the global network policy is to not allow Windows automatic updates, any user
attempting to connect through the High security NAC policy fails the test, and is not able to change
their endpoint settings to pass the test. In this example, change the NAC policy to not run the Windows
automatic update test:
Sentriant AG Home window>>NAC policies
1. Select the NAC policy that tests the domain's endpoints.
2. Select the Tests menu option.
3. Clear the Windows automatic updates check box.
4. Click ok.
Sentriant AG Users' Guide, Version 5.0
System Administration
295