New Users - HP 800 User Manual

New Users

The process NAC 800 follows for allowing end-users to connect is:
■ Inline mode – An IP address is assigned to the endpoint outside of
NAC 800. When the end-user attempts to connect to the network, NAC
800 either blocks access or allows access by adding the endpoint IP
address to the internal firewall.
DHCP mode – New end-users boot their computers. The boot process
■
looks for an IP address and, because they are new end-users and no
information is known about the endpoints, a temporary quarantined
IP address is assigned. The end-users log in on the Windows login
screen. The end-users start IE and NAC 800 attempts to test the
endpoint. The endpoints either retain the quarantined IP address, or
are assigned a non-quarantined network IP address based on the
testing result.
■ 802.1X mode – An endpoint attempts to connect to the network. The
end-user's identity is verified via an authentication server. If the
endpoint is not authenticated, it is quarantined (allowed access to a
limited VLAN). If the endpoint is authenticated, it is tested by NAC
800. If the endpoint fails the NAC 800 testing, it is quarantined
(allowed access to a limited VLAN). If the endpoint passes the NAC
800 testing, it is allowed access to the network (VLAN).
Quarantined Networks

New Users

7-9