Nac Policy Hierarchy; Setting Retest Time; Setting Connection Time - HP 800 User Manual

NOTE:
TIP:
Adding an endpoint or domain to multiple policies results in the endpoint
being assigned to the first enabled NAC policy in the list.

NAC Policy Hierarchy

If an endpoint is listed in more than one NAC policy, the order of use is as
alphabetical by name of NAC policy (not including the default NAC policy).

Setting Retest Time

Retest endpoints connected to your network frequently to guard against
potential changes in the remote endpoint configurations.
To set the time to wait before retesting a connected endpoint:
Home window>>NAC policies>>Select a NAC Policy>>Basic settings menu
option
1. In the Retest frequency area, enter how frequently in minutes, hours, or
days NAC 800 should retest a connected endpoint.
A lower number ensures higher security, but puts more load on the NAC 800
server.
2. Click ok.

Setting Connection Time

When an endpoint is inactive for a period of time, you can elect to automati-
cally move the endpoint to a quarantined state. Quarantining inactive end-
points guards against unauthorized access to the network. When the endpoint
becomes active again, the usual process occurs for moving the endpoint out
of quarantine. For example, if the endpoint was in good standing prior to the
inactivity quarantine, the end-user may just need to log in again; however,
other changes (such as a policy change or new required hotfix) may require
the end-user to perform some action before being allowed on the network
again.
To set the time an end-user can be inactive:
Home window>>NAC policies>>Select a NAC Policy>>Basic settings menu
option
NAC Policies
NAC Policy Tasks
6-15