Enforcement Cluster Access Mode - HP 800 User Manual

Endpoint Activity

Enforcement Cluster Access Mode

4-14

Enforcement Cluster Access Mode

The access mode of each cluster can be one of the following:
■ normal – Endpoints are tested and allowed access or quarantined
based on policies, exceptions, and administrator overrides.
■ allow all – Endpoints are tested as in normal mode; however, all
endpoints are allowed access.
When you change the access mode from normal to allow all, the icons and
endpoint status shown on the Endpoint activity window change as described in
this section.
An endpoint attempts to connect to the network and is quarantined. figure 4-
8 shows that the Endpoint test status is Failed (red X in the et column), and that
the endpoint is quarantined (red symbol with X in the ac column).
Figure 4-8. Failed Endpoint
The admin changes the access mode from normal to allow all (System Configu-
ration>>Quarantining>>Access mode area, allow all radio button).
figure 4-9 shows that the previously quarantined endpoint is now allowed
access (green icon in the ac column); however, the Endpoint test status still
shows Failed (red X in the et column).
Figure 4-9. Failed Endpoint Allow All Mode
Hover the mouse over the green icon in the ac column and a window pops up
(figure 4-10) providing a description of the endpoint access control status as
well as what the access control status would be in normal mode. In this case,