Firewall Settings; Managed Endpoints; Unmanaged Endpoints; Making Changes To The Firewall - HP ProCurve NAC 800 User Manual

Hide thumbs Also See for ProCurve NAC 800:

Table of Contents

End-user Access

Firewall Settings

NAC 800 can perform tests through firewalls on both managed and unmanaged

Typically, a managed endpoint's firewall is controlled with the Domain Group

Policy for Windows, or a central policy manager for other firewalls. In this

case, the network administrator opens up the agent port or agentless ports

only to the NAC 800 server using the centralized policy.

If the Domain Group Policy is not used for Windows endpoints, the appropri-

ate ports are opened during the agent installation process by the NAC 800

For unmanaged endpoints, the NAC Agent and the ActiveX control test

methods automatically open the necessary ports for testing.

End-users connecting with Windows XP, but a non-SP2 firewall (such as

Norton) must configure that firewall to allow connection to NAC 800 on port

1500, or the installation of the agent fails.

See the following sections for instructions:

"Allowing the Windows RPC Service through the Firewall" on page 5-

"Allowing NAC 800 through the OS X Firewall" on page 5-25