HP ProCurve NAC 800 User Manual page 193

routing issue which is not allowing the endpoint to reach the neces-
sary servers on the network. Also, if NAC 800 is inline with the domain
controller, you might need to open up the appropriate ports (135
through 138, 445, 389, 1029) in the NAC 800 accessible endpoints
configuration for your domain controller IP address. Once the
endpoint can reach the necessary servers, retest the endpoint.
■ Connection failed – endpoint/domain trust failure – The supplied
credentials failed to authenticate because a previous trust relation-
ship established between the endpoint and the Windows directory is
broken in some way. Resolve this problem by adding the endpoint
again as a member of the appropriate Windows domain, then retest
the endpoint.
■ Connection failed – timed out – NAC 800 timed out while trying to
connect to or retrieve information from the endpoint. This could be
due to a slow or saturated network, or the endpoint might have been
shutdown or rebooted while it was being tested by NAC 800. If the
endpoint is still on the network, retest it with NAC 800.
Connection failed – session setup – NAC 800 shows this status when
■
the RPC client had problems communicating with the endpoint.
■ Failed testing - insufficient test privileges – The credentials NAC 800
used to test the endpoint do not have sufficient privileges to read the
registry or enumerate the services. An easy way to debug this is to run
regedit and connect to the remote endpoint using the same admin
credentials supplied to NAC 800. You should be allowed to browse
the HKLM\Software and HKLM\System keys on the endpoint. Retest
the end point after increasing the credential permission levels or using
a different set of credentials with the necessary permissions.
■ Connection failed – no route to host – The endpoint is unreachable
on the network by NAC 800. This can be due to either a network
routing issue or because the endpoint has powered off or is in the
process of rebooting. Retest the endpoint once the routing issues have
been resolved or the endpoint is back on the network.
Failed testing – patching endpoint – The endpoint failed testing and
■
patching is in progress.
■ Patching endpoint failed – The endpoint is unable to be patched.
■ Patching endpoint complete – Patching of endpoint is successful.
Endpoint disconnected before could be tested – NAC 800 shows this
■
status when the endpoint disconnects from the network before
testing could be completed.
Endpoint Activity
Endpoint Test Status
4-13