Users Guide

378 | Configuring Enforcement Policies and Profiles Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Configuring Agent Enforcement Attributes
Use the Attributes tab to configure the attribute name and attribute value for each attribute you add.
Figure 358: Agent Enforcement > Attributes Dialog
Specify the Agent Enforcement > Attributes parameters as described in the following table:
Attribute Action/Description
Attribute Name Select one of the following attribute names:
l Bounce Client: To bounce the network interface, set the value to True.
l Message: Enter the message that needs to be notified on the endpoint.
l Session Timeout (in seconds): Configure the agent session timeout interval to periodically
evaluate the endpoint's health.
OnGuard Agent performs health checks after the specified session timeout interval and
updates the health status of the endpoint in Policy Cache.
You can specify the session timeout interval from 60 to 600 seconds. The default value is 0.
Note that setting the lower value for the session timeout interval results in numerous
authentication requests in the Access Tracker page.
l Health Check Interval (in hours): Specify the health-check interval value in hours for
different Agent Enforcement Profiles for different users. The allowed range is of 0 to 1000
hours.
NOTE: The value of the Policy result cache timeout parameter (Administration > Server
Manager > Server Configuration > Cluster-Wide Parameters > General tab) must be
greater than the highest value of all the Health Check Interval (in hours) values.
Note the following information when you set the Health Check Interval parameter:
n You can set this parameter if OnGuard mode is set to Health only.
n This parameter is valid only for wired and wireless interface types.
n This parameter is not applicable for the OnGuard Dissolvable Agent, VPN, and Other
interface types.
l Enable to hide Retry button: To hide the Retry button in the OnGuard Agent, set the
value to True.
l Enable to hide Logout button: To hide the Logout button in the OnGuard Agent, set the
value to True.
l Enable to hide Quit option: To hide all Quit options in the OnGuard Agent, set the value to
True.
l Bounce Delay (in seconds): When Bounce Delay is configured, the network interface is
bounced after the specified delay.
l Show Custom UIfor Custom Scripts: Click the check box to set this attribue to True and
enable the OnGuard Agent Remediation User Interface for Custom Scripts (for related
information, refer to the Custom User Interface parameter in Creating OnGuard Custom
Web Pages on page 702).
l SDK Type: Allows you to specify the V3 or V4 OnGuard Detection SDK (for related
information, see Upgrading From OnGuard Plugin Version 1.0 to 2.0 on page 740).
Attribute Value The value set depends on the selected Attribute Name.
Table 192: Agent Enforcement > Attributes Tab Parameters