NAC PoliciesNAC Policy Tasks6-15NOTE: Adding an endpoint or domain to multiple policies results in the endpointbeing assigned to the first enabled NAC policy in the list.NAC Policy HierarchyIf an endpoint is listed in more than one NAC policy, the order of use is asalphabetical by name of NAC policy (not including the default NAC policy).Setting Retest TimeRetest endpoints connected to your network frequently to guard againstpotential changes in the remote endpoint configurations.To set the time to wait before retesting a connected endpoint: Home window>>NAC policies>>Select a NAC Policy>>Basic settings menuoption1. In the Retest frequency area, enter how frequently in minutes, hours, ordays NAC 800 should retest a connected endpoint.TIP: A lower number ensures higher security, but puts more load on the NAC 800server.2. Click ok.Setting Connection TimeWhen an endpoint is inactive for a period of time, you can elect to automati-cally move the endpoint to a quarantined state. Quarantining inactive end-points guards against unauthorized access to the network. When the endpointbecomes active again, the usual process occurs for moving the endpoint outof quarantine. For example, if the endpoint was in good standing prior to theinactivity quarantine, the end-user may just need to log in again; however,other changes (such as a policy change or new required hotfix) may requirethe end-user to perform some action before being allowed on the networkagain.To set the time an end-user can be inactive: Home window>>NAC policies>>Select a NAC Policy>>Basic settings menuoption
