Nac Policy Hierarchy; Setting Retest Time; Setting Connection Time - HP ProCurve NAC 800 User Manual

NOTE:
NOTE:
TIP:
You can use a MAC prefix (one to five bytes or octets) to act on more than
one endpoint at a time. For example entering 00:13 matches all MAC
addresses that begin with 00:13.
In the Windows domains area, enter a domain name or list of domain names
2.
separated by a carriage return.
3. Click ok.
Adding an endpoint or domain to multiple policies results in the endpoint
being assigned to the first enabled NAC policy in the list.

NAC Policy Hierarchy

If an endpoint is listed in more than one NAC policy, the order of use is as
alphabetical by name of NAC policy (not including the default NAC policy).

Setting Retest Time

Retest endpoints connected to your network frequently to guard against
potential changes in the remote endpoint configurations.
To set the time to wait before retesting a connected endpoint:
Home window>>NAC policies>>Select a NAC Policy>>Basic settings menu
option
In the Retest frequency area, enter how frequently in minutes, hours, or
1.
days NAC 800 should retest a connected endpoint.
A lower number ensures higher security, but puts more load on the NAC 800
server.
Click ok.
2.

Setting Connection Time

When an endpoint is inactive for a period of time, you can elect to automati-
cally move the endpoint to a quarantined state. Quarantining inactive end-
points guards against unauthorized access to the network. When the endpoint
becomes active again, the usual process occurs for moving the endpoint out
of quarantine. For example, if the endpoint was in good standing prior to the
NAC Policies
NAC Policy Tasks
6-15