Performance

• Efficient endpoint testing: typical endpoint testing can be completed in less than ten seconds, avoiding lengthy wait times as endpoints are connected to the network
  
  
• Support for up to 30,000 concurrent endpoints in one management domain: each enforcement server can support up to 3,000 endpoints, and one management server can control up to ten enforcement servers

Resiliency and high availability

• Enforcement server resiliency and redundancy: enable high network availability for mission-critical LAN deployments; enforcement servers continue to provide authentication and endpoint testing services in the absence of a management server and can be configured in clusters to provide redundancy and load-balancing for endpoint testing

Security

• Built-in RADIUS server: can perform authentication services or act as a proxy server for a remote RADIUS authentication service
  
  
• Supports standard-based or a local authentication directory: can integrate with existing Active Directory or standard LDAP directory services or can host a local authentication directory for smaller environments
  
  
• Endpoint integrity assessment: enables both pre-authentication and post-authentication testing of network-attached endpoints; includes an extensive set of built-in endpoint tests and is extensible to test for any prohibited or required software:
  • Operating system: versions, service pack levels, and hot fixes
    
    
  • Security settings: firewall, auto-update, and browser security settings
    
    
  • Security software: antivirus, antispyware, and firewalls
    
    
  • Malware: spyware, worms, viruses, and trojans
    
    
  • Applications: peer-to-peer and instant messaging software
  
  
• Flexible enforcement modes: offer multiple enforcement modes that can be used together and centrally managed by a single management server to share endpoint policies and licenses:
  • RADIUS: integrates with RADIUS authentication to allow access only to authorized users and devices; uses RADIUS authorization capabilities to isolate endpoints for testing prior to providing complete network access and isolation of non-compliant endpoints
    
    
  • DHCP: integrates with DHCP servers to isolate and test endpoints before they are allowed to access production networks and interact with other network clients and resources
    
    
  • Inline: actively monitors a link for new endpoints and tests them before they are allowed to access the network; enables testing of remote endpoints connecting through a VPN concentrator
  
  
• Flexible testing methods: enables endpoint testing that meets the broad needs of most businesses, including solutions for both managed and unmanaged endpoints:
  • Agent based: a permanent agent can be installed on endpoints to evaluate endpoint integrity status; it is the most efficient mode for managed endpoints that will continually connect to the network
    
    
  • Transient agent: an agent is temporarily downloaded to the endpoint to evaluate endpoint integrity, and then it enables unmanaged endpoints to be tested without the need to have an agent preloaded and remain on the endpoint
    
    
  • Agentless: uses administrative credentials for an endpoint along with native communications protocols to evaluate the endpoint integrity status; enables endpoints that are part of a managed domain or have known administrative credentials to be tested without ever loading an agent
  
  
• Endpoint quarantine: policy-based enforcement allows for isolation of non-compliant endpoints
  
  
• Configurable remediation feedback: provides administrator-customized feedback to users on how they can remediate their systems and be allowed full network access
  
  
• Integration with Microsoft SMS: endpoints that fail testing and are also managed by a Microsoft Systems Management Server (SMS) agent will be prompted to contact the SMS for updates and will be retested once updates have been applied

Policy management

• Policy-based network access rights: integrate with ProCurve Identity Driven Manager and network devices to apply centrally managed network access policies to be enforced at the edge of the network, where users and devices attach; allow network administrators to easily create and maintain robust access policies, including secure guest access to appropriate network services, without risk to the network

Product Architecture

• The ProCurve Network Access Controller 800: can be configured to take on different roles in a secure network access solution:
  • Management server: a centralized server that manages and monitors multiple enforcement servers, including the endpoint integrity policies and centralized logging of endpoint authentication and test results, availability, and status
    
    
  • Enforcement server: provides RADIUS-based authentication of endpoints, along with testing of endpoints to evaluate compliance with endpoint integrity policies, policy-based isolation of non-compliant endpoints, and customized user feedback on how to remediate issues
    
    
  • Combination server: a single-server solution that combines the management server and enforcement server roles into a single appliance solution. A combination server only manages the enforcement server that is running in the combination server. A combination server can also be used in conjunction with ProCurve Identity Driven Manager to provide RADIUS-based authentication and the Identity Driven Manager adaptive networking capabilities without endpoint integrity testing
    
    
  • Note: endpoint integrity testing is a capability that requires the additional purchase of HP ProCurve NAC Endpoint Integrity Agent licenses (see Accessories) and an initial Implementation Startup Service provided by a ProCurve-certified service provider or purchased through ProCurve (see Services).

Warranty and support

• Warranty: one-year hardware limited warranty with next-business-day advance replacement (available in most countries); warranty extensions are available.
  
  
• Electronic and telephone support: limited electronic and telephone support is available from HP. Refer to the HP Web site at www.procurve.com/support for details on the support provided and the period during which support is available.
  
  
• Software releases: refer to the HP Web site at www.procurve.com/support for details on the software releases provided and the period during which software releases are available.

• »Return to top

Ports

Physical characteristics

Memory and processor

Mounting

Environment

Electrical characteristics

Safety

Emissions

Immunity

Management

Notes

• Windows Vista, Windows XP, Windows Server 2003, Windows 2000, Windows NT, and Mac OS X

• J9083A--HP ProCurve NAC Endpoint Integrity Implementation Startup Service (Inline and DHCP)
• J9084A--HP ProCurve NAC Endpoint Integrity Implementation Startup Service (IEEE 802.1x)

• »Return to top

• »Return to top

HP Care Packs for ProCurve

• 3-year, parts only, global next-day advance exchange (UH199E)
• 3-year, 4-hour onsite, 13x5 coverage for hardware (UH196E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware (UH197E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 software phone support (UH198E)
• Installation with minimum configuration, system-based pricing (U4826E)
• 1 Year Post Warranty Next Bus. Day Exchange (UH200PE)
• 1 Year Post Warranty 4 hour response 13x5 Onsite Support (UH201PE)
• 1 Year Post Warranty 4 hour response 24x7 Onsite HW Support (UH202PE)
• 1 Year Post Warranty HW and SW 24x7 Phone Support (UH203PE)
• Startup of the NAC 800 with EI - DHCP and Inline (J9083A)
• Startup of the NAC 800 with EI - 802.1x (J9084A)

Services

Additional support

• »Customer Care Overview
• »Contact Support via telephone
• »Contact Support via email
• »Warranty & Support Overview
• »Ask ProCurve (Knowledge Base)

• »Return to top

Purchase ProCurve Networking by HP products and services outside North America

HP ProCurve Network Access Controller 800 (J9065A)

• »Return to top