Novell ZENworks Network Access Control provides on-going feedback on the test status of endpoints in the left pane of the Endpoint activity window as follows:
HINT:To view access status, see Section 4.5, Viewing Endpoint Access Status.
Failed — Novell ZENworks Network Access Control shows this status after the endpoint has failed testing. Click on the plus (+) symbol to show the test failed categories.
Passed — Novell ZENworks Network Access Control shows this status after the endpoint has passed the test and is connected to the network.
Not tested — Novell ZENworks Network Access Control shows this status when a device cannot be tested.
Connecting — Novell ZENworks Network Access Control shows this status briefly after the endpoint has been tested while the endpoint is being assigned a non-quarantined IP address.
If you hover the mouse cursor over the icons in the Endpoint activity window, you will get additional information about the status of the endpoint.
Figure 4-7 Endpoint Mousover Pop-up Window
The following lists the possible test statuses:
Unknown error — This is most likely a problem that cannot be resolved without contacting Novell. Try to force a retest from the Novell ZENworks Network Access Control user interface. If that does not work, call Novell Support (800-858-4000) and be prepared to generate a support package (see Section 16.7.4, Generating a Support Package).
Connecting — Novell ZENworks Network Access Control shows this status briefly after the endpoint has been tested while the endpoint is being assigned a non-quarantined IP address.
Awaiting credentials — Novell ZENworks Network Access Control shows this status briefly while the agentless credentials are being verified.
Bad credentials — Novell ZENworks Network Access Control shows this status when the agentless credentials could not be verified. The end-user is presented with a window stating why the credentials may have failed, and is given the opportunity to re-enter the credentials, cancel the test, or try the next test method (specified on the End-user access window).
Testing (agentless test) — Novell ZENworks Network Access Control shows this status briefly while the agentless test is being performed.
Passed — Novell ZENworks Network Access Control shows this status after the endpoint has passed the test and is connected to the network.
Failed — Novell ZENworks Network Access Control shows this status after the endpoint has failed testing.
Could not be tested — Novell ZENworks Network Access Control shows this status after the endpoint could not be tested.
License limit exceeded — Novell ZENworks Network Access Control shows this status when the number of endpoints allowed on your license has been exceeded. The endpoint is not tested or allowed access.
License expired — Novell ZENworks Network Access Control shows this status when your license has expired. No endpoints are tested or allowed access to the network.
Test canceled — Novell ZENworks Network Access Control shows this status when the end-user cancels the test.
Endpoint always granted access — Novell ZENworks Network Access Control shows this status when an endpoint has been listed in the System configuration>>Exceptions window to always grant access (Whitelist). These endpoints are never tested and always allowed access.
Endpoint always quarantined — Novell ZENworks Network Access Control shows this status when an endpoint has been listed in the System configuration>>Exceptions window to always quarantine. These endpoints are never tested and always quarantined. (Blacklist)
Awaiting test initiation — Novell ZENworks Network Access Control shows this status when one of the following conditions occurs:
Novell ZENworks Network Access Control does not have credentials and there is no agent
Novell ZENworks Network Access Control does not have credentials and the endpoint is firewalled
Novell ZENworks Network Access Control is waiting for credentials or an agent
No testing has taken place yet
Installing test service — Novell ZENworks Network Access Control shows this status briefly while the agent is being installed.
Installation canceled — Novell ZENworks Network Access Control shows this status when the end-user has cancelled the installation of the agent.
Testing (agent) — Novell ZENworks Network Access Control shows this status briefly while the endpoint is being tested by the agent-based method.
Testing (ActiveX plug-in) — Novell ZENworks Network Access Control shows this status briefly while the endpoint is being tested by the ActiveX method.
Installing ActiveX plug-in — Novell ZENworks Network Access Control shows this status briefly while the ActiveX plug-in is being installed.
ActiveX plug-in installation failed — Novell ZENworks Network Access Control shows this status when installation of the ActiveX plug-in failed. The installation probably failed due to browser settings (see “Important browser settings” in the Novell ZENworks Network Access Control Installation Guide). The end-user has the option to retry or cancel which presents the user with the next testing method specified on the End-user access screen.
Validating installation — Novell ZENworks Network Access Control shows this status while Novell ZENworks Network Access Control is validating that the agent is working.
Installation failed — Novell ZENworks Network Access Control shows this status when the agent cannot be installed. This is likely due to permission problems on the endpoint.
Agent not active — Novell ZENworks Network Access Control shows this status when an endpoint that was previously running the agent is no longer running the agent. This is likely due to a firewall being turned on.
Awaiting ip transition — Novell ZENworks Network Access Control shows this status during a transition from a quarantined IP address and a non-quarantined IP address and vice versa.
Connection failed- endpoint busy or file and print sharing disabled — During the connection to the endpoint, the endpoint is not able to complete the requested testing by Novell ZENworks Network Access Control. This condition can occur when then endpoint is busy running other processes or programs, or it might be in an overloaded condition. Retesting the endpoint again at a later time generally resolves this problem. Defragmenting the hard disk can also help this situation on slower endpoints.
Connection Failed (unsigned SMB) — Testing of the endpoint failed due to an unsigned SMB.
Connection failed — no logon server — During the connection process, the endpoint was not able to validate the user ID and password credentials supplied by Novell ZENworks Network Access Control because the endpoint does not have network access to any authentication servers. This can be due to a routing issue which is not allowing the endpoint to reach the necessary servers on the network. Also, if Novell ZENworks Network Access Control is inline with the domain controller, you might need to open up the appropriate ports (135 through 138, 445, 389, 1029) in the Novell ZENworks Network Access Control accessible endpoints configuration for your domain controller IP address. Once the endpoint can reach the necessary servers, retest the endpoint.
Connection failed — endpoint/domain trust failure — The supplied credentials failed to authenticate because a previous trust relationship established between the endpoint and the Windows directory is broken in some way. Resolve this problem by adding the endpoint again as a member of the appropriate Windows domain, then retest the endpoint.
Connection failed — timed out — Novell ZENworks Network Access Control timed out while trying to connect to or retrieve information from the endpoint. This could be due to a slow or saturated network, or the endpoint might have been shutdown or rebooted while it was being tested by Novell ZENworks Network Access Control. If the endpoint is still on the network, retest it with Novell ZENworks Network Access Control.
Connection failed — session setup — Novell ZENworks Network Access Control shows this status when the RPC client had problems communicating with the endpoint.
Failed testing — insufficient test privileges — The credentials Novell ZENworks Network Access Control used to test the endpoint do not have sufficient privileges to read the registry or enumerate the services. An easy way to debug this is to run regedit and connect to the remote endpoint using the same admin credentials supplied to Novell ZENworks Network Access Control. You should be allowed to browse the HKLM\Software and HKLM\System keys on the endpoint. Retest the end point after increasing the credential permission levels or using a different set of credentials with the necessary permissions.
Connection failed — no route to host — The endpoint is unreachable on the network by Novell ZENworks Network Access Control. This can be due to either a network routing issue or because the endpoint has powered off or is in the process of rebooting. Retest the endpoint once the routing issues have been resolved or the endpoint is back on the network.
Failed testing — patching endpoint — The endpoint failed testing and patching is in progress.
Patching endpoint failed — The endpoint is unable to be patched.
Patching endpoint complete — Patching of endpoint is successful.
Endpoint disconnected before could be tested — Novell ZENworks Network Access Control shows this status when the endpoint disconnects from the network before testing could be completed.