6.4 About Novell ZENworks Network Access Control Tests

Novell ZENworks Network Access Control tests are assigned to NAC policies. NAC policies are used to test endpoints attempting to connect to your network. Novell ZENworks Network Access Control tests might be updated as often as hourly; however, at the time of this release, the tests shown in Section B.0, Tests Help were included (see Section 6.4.1, Viewing Information About Tests for instructions on viewing the latest list of tests).

The following sections contain more information:

6.4.1 Viewing Information About Tests

To view the most current list of tests and descriptions:

Home window>>NAC policies>>Select a NAC Policy>>Tests menu option

Click on a test name. The test description and selectable properties are shown for the selected test.

If the icons (Figure 6-9) are red, the test is enabled and the actions selected will take effect immediately. If the icons are gray, the test is not enabled, and the actions will not take effect. To enable the test, select the check box next to the test name.

6.4.2 Selecting Test Properties

Tests either have standard properties (non-selectable), selectable properties, or text entry fields.

Select the check box or radio button that applies for each test. A check box indicates that you can make multiple selections. A radio button indicates that you can make one choice from the list.

The following sections contain more information:

Entering Software Required/Not Allowed

Novell ZENworks Network Access Control checks the Windows registry on the endpoint for the existence of software. Most software vendors record their product information in the HKEY_LOCAL_MACHINE\Software registry key using the following format:

<vendor>\<software package>\<version>

For example, Mozilla\Mozilla Firefox 1.5.0.6

You can enter any combination of these keys in the Novell ZENworks Network Access Control text entry fields to detect a vendor, software package and version on an endpoint (for example, you can also enter Mozilla\Firefox or simply Mozilla) and Novell ZENworks Network Access Control searches for them in the HKEY_LOCAL_MACHINE\Software registry key sub-tree.

HINT:The entries are not case sensitive. This test simply checks to see if the registry key exists in HKEY_LOCAL_MACHINE\Software or HKEY_CURRENT_USER\Software. So, these values must match the registry keys as displayed in the registry editor. If you just specify Mozilla (or mozilla) and HKEY_LOCAL_MACHINE\Software\Mozilla exists in the registry, the test would match.

To find the software registry keys on the endpoint:

  1. Select Start>>Run

  2. Type:regedit

  3. Click OK.

  4. Expand the HKEY_LOCAL_MACHINE key.

  5. Expand the SOFTWARE key.

  6. View the sub-trees for various vendors software and versions.

HINT:If you’re looking for a registry key, you enter a trailing slash. If you’re looking for a registry value, you do not enter a trailing slash.

Entering Service Names Required/Not Allowed

Services are Windows operating system applications that run automatically, without manual intervention.

To find the services names on the endpoint:

Service names must be entered exactly as they appear in Control panel>>Administrative tools>>Services application.

HINT:Enter the names of software and services in the Novell ZENworks Network Access Control text entry field separated by a carriage return.

For example, the following are examples of services:

  • Telnet

  • Utility Manager

  • Windows Installer

Entering the Browser Version Number

To specify the minimum browser version the end-user needs:

  1. For Mozilla Firefox:

    1. Clear the Check For Mozilla Firefox [1.5] check box.

    2. Type a version number in the text entry field.

  2. For Internet Explorer on Windows XP and Windows 2003:

    1. Clear the Check For Internet Explorer for Windows XP and Windows 2003 [6.0.2900.2180] check box.

    2. Type a version number in the text entry field.

  3. For Internet Explorer on Windows 2000:

    1. Clear the Check For Internet Explorer for Windows 2000 [6.0.2800.1106] check box.

    2. Type a version number in the text entry field.

6.4.3 Test Icons

The NAC policy tests show icons that represent the test failure action selected as shown in the following figure:

Figure 6-9 NAC Policy Test Icons