Administrator Guide

4. Name: Select the desired Global Agent Setting (see Table 359).
5. Value: Specify the appropriate value.
6. Repeat these steps as necessary for each additional setting, then click Save.
Global Settings Parameters for OnGuard Agents
Table 359 describes the Global Settings parameters for OnGuard agents:
Parameter Action/Description
Name Allowed Subnets for Wired access: Add a comma-separated list of IP addresses or subnet
addresses.
Allowed Subnets for Wireless access: Add a comma-separated list of IP addresses or subnet
addresses.
Cache Credentials Interval (in days): Select the number of days the user credentials should
be cached on OnGuard agents.
Delay to bounce after Logout (in minutes): Specify the number of minutes that should elapse
before OnGuard bounces the interface if OnGuard remains disconnected.
Enable OnGuard requests load-balancing: Enable this option to balance the load of OnGuard
authentication requests across W-ClearPass Policy Manager servers in a cluster.
Enable access over Remote Desktop Session: Enable this option to allow OnGuard access
through a Remote Desktop session.
Enable to hide Logout button:Enable this option to hide the Logout button on OnGuard
agent.
Enable to install VPN component: Enable this option to install the OnGuard VPN component.
Enable to use Windows Single-Sign On: Enable this option to allow use of a user's Windows
credentials for authentication.
Keep-alive Interval (in seconds): Specify a keep-alive interval for OnGuard agents.
The connected OnGuard Agents periodically send heart-beat (Keep-Alive) messages to
W-ClearPass Policy Manager. This interval is defined by the Keep-alive Interval (in seconds)
parameter. The default value is 60 seconds.
W-ClearPass uses Keep-Alive messages to:
l Update the status of OnGuard Agents regarding OnGuard Activity.
l Issue CoA (Change of Authorization) for a Session Restrictions Enforcement Profile if
OnGuard Agent is disconnected:
n Session-Check > Agent-Connection = Down
n Post-Auth-Check > Action = Disconnect
For related information, see Session Restrictions Enforcement on page 381.
OnGuard Health Check Interval (in hours): Specify the number of hours that OnGuard will
skip health checks for healthy clients.
NOTE: Note the following information when you set the OnGuard Health Check Interval
parameter:
n You can set this parameter if OnGuard mode is set to health only.
Table 359: Configure Global Settings Parameters
Dell Networking W-ClearPass Policy Manager 6.6 | User Guide Administration | 655