Extreme Networks Sentriant AG Software User's Manual page 209

endpoints, you can disable or delete the policy and re-enable the copied policy to re-establish the
previous access control behavior.
9 In the Untestable endpoints area, select the Allowed unsupported OSs of endpoints assigned to the
NAC policy which cannot be tested but will be granted network access.
Unsupported Windows (Windows 3.x, NT, 95, 98, ME)
■
UNIX/Linux
■
All other unsupported operating systems
■
NOTE
These operating systems may not be selected if the Trust level is set to blacklisted or whitelisted. In the case of
blacklisted endpoints, all will be quarantined regardless of the operating system. For whitelists, all assigned
endpoints will be allowed on the network.
NOTE
In DHCP mode, if an endpoint with an unsupported OS already has a DHCP-assigned IP address, Sentriant AG
cannot affect this endpoint in any way until the lease on the existing IP address for that endpoint expires. In
addition, if an endpoint with an unsupported OS has a static IP address, Sentriant AG cannot affect this endpoint in
any way. In both of these cases, the Endpoint activity window may show the quarantined icon next to these
endpoints; however, if you hover your mouse over the red quarantined icon, the actual status shows that the
endpoint should be quarantined, but the quarantine action was unsuccessful.
CAUTION
Allowing untestable endpoints on your network has risks. See
for more information.
NOTE
A security best practice is to not allow unsupported operating systems (untested endpoints) on your network. It is
more secure to allow untested endpoints access to your network on a case-by-case basis by adding them to a NAC
policy having an Trust level of whitelist.
10 In the Untestable endpoints area, enter the Inactivity timeout, which is the amount of time, in the
absence of actual network traffic generated by the endpoint, Sentriant AG should assume untestable
endpoints are connected to the network.
Sentriant AG Software Users Guide, Version 5.3
"Untestable Endpoints and DHCP Mode" on page 217
NAC Policies
209