Table 11–1Barracuda NG Access Monitor

Property

Description

 

 

 

Client Origin

Local Computer

 

 

Health evaluation for the client computer is mandatory; if the health evaluation for the client computer

 

 

is not successful, evaluation based on user credentials is not possible.

 

Current User

 

 

When multiple users use the same computer it is possible to start health evaluation based on user

 

 

credentials, matching each user with its own policy depending on his role in the network.

 

VPN

 

 

When connected to the Access Control Server using a VPN connection

 

 

Last Health Check

Date and time when the last health evaluation was performed.

 

 

Next Health Check

Date and time the next health evaluation will be performed.

 

 

Quarantine Status

The quarantine status depends on the health condition of the client computer. Three states are provided for

 

policy based network access, these include:

 

Not Restricted

 

 

Full network access is granted when the health evaluation result returns the health state Healthy.

 

Probation

 

 

When the client computer does not meet the configured health requirements, it will enter probation

 

 

state. In this state he is not restricted in order to contact network resources necessary to meet all health

 

 

requirements. If the following health evaluation does not return a Healthy state he will enter restricted

 

 

network access mode.

 

Restricted

 

 

If restricted network access is active, the Client will activate the quarantine rule set assigned by the

 

 

Access Control Server.

 

Note:

 

It is possible to configure two quarantine rule sets, one for when the client computer does not meet the

 

health requirements and is unhealthy. The other for when the client computer is untrusted because no rule

 

is defined for it.

 

 

Access Control Server

IP or hostname of the Access Control Server that is being contacted for health evaluation. See

 

11.3.2 Access Control Server IPs from Registry, page 160 and 11.3.3 Access Control Server IPs from DHCP,

 

page 160.

Emergency Network Adapter Repair If enabled this allows you to reset the network adapters managed by the Port Security wpa_supplicant. To

 

enable or disable see 11.3.12 Allow Emergency Network Adapter Repair, page 163.

 

 

Image of the day

Custom welcome image configurable on the Access Control Server, for following states:

 

• Local Computer - healthy, limited access

 

• Current User - healthy

 

• VPN - healthy

 

 

Message of the day

Custom welcome message supporting Unicode configurable on the Access Control Server for following

 

states:

 

• Local Computer - healthy, limited access

 

• Current User - healthy

 

• VPN - healthy, limited access

 

 

Health evaluation result

This shows the actual health evaluation result. It holds an entry for every health criteria and if it complies with

 

the policy configured.

 

If a criterion does not meet the requirements, a description of necessary actions in order to comply with the

 

policy is shown.

 

 

151 Barracuda NG Network Access Client - Administrator’s Guide

Page 153
Image 153
Barracuda Networks VERSION SP4 manual Property Description