Windows Endpoint Settings; Ie Internet Security Setting; Agent-Based Test Method; Ports Used For Testing - HP ProCurve NAC 800 User Manual

Windows Endpoint Settings

IE Internet Security Setting

If the end-user has their IE Internet security zone set to High, the endpoint is
not testable. Using one of the following options will allow the endpoint to be
tested:
The end-user could change the Internet security to Medium
■
(Tools>>Internet options>>Security>>Custom level>>Reset to Medium).
The end-user could add the IP address of the NAC 800 server to the
■
Trusted sites zone, and then set the Trusted sites zone to Medium.
The end-user could customize the High setting to allow the options
■
necessary for NAC 800 to test successfully. These options are as
follows:
• The NAC Agent test uses ActiveX
• The ActiveX test uses ActiveX
• All of the tests use JavaScript

Agent-based Test Method

Ports Used for Testing

You might need to configure some firewalls and routers to allow NAC 800 to
access port 1500 for agent-based testing.
TIP:
See "Ports used in NAC 800" on page E-1 for a complete description of the
ports used in NAC 800.

Windows Vista Settings

All Windows Vista endpoints must have administrator permissions in order
for the agent to install successfully. If the end-user is not logged in to the
endpoint with administrator permissions, the following occurs:
■ If User Account Control (UAC) is enabled, Windows Vista prompts
you for credentials. After the credentials are entered, the agent
installs.
If UAC is disabled, the agent installation fails without notifying the
■
end-user.
End-user Access

Windows Endpoint Settings

5-9