topic Re: NAC and Microsoft SMS in Network Security

NAC and Microsoft SMS

shuman13x — Fri, 21 Feb 2020 11:59:27 GMT

Hi,

Does NAC Windows patch remediation works with Microsoft SMS server? I understand it works with WSUS but is it able to integrate with SMS?

Thanks.

Re: NAC and Microsoft SMS

blaxucisco — Tue, 15 Jun 2010 23:03:02 GMT

Hi shuman,

cisco nac supports wsus, sms or sccm.

thank you

Re: NAC and Microsoft SMS

shuman13x — Wed, 16 Jun 2010 02:52:48 GMT

Hi blaxucisco,

Thanks for the info. May i know is there a doc on how to configure sms/sccm remediation? Even from guide 4.7.2, i only noticed Windows Updates and WSUS requirement. Do I need to user Launch Programs requirement for sms/sccm?

Thanks.

Re: NAC and Microsoft SMS

Faisal Sehbai — Wed, 16 Jun 2010 03:00:26 GMT

Hi,

There isn't any 'native' support for those products. You can however check for registry keys or files that are present on your client systems that might be associated with those products. Natively CCA can check for WSUS and WU only for Windows updates.

HTH,

Faisal

Re: NAC and Microsoft SMS

blaxucisco — Wed, 16 Jun 2010 03:36:33 GMT

Hi Shuman,

in my understanding, WSUS is integrated part of the SMS and SCCM. we don't need to do any extra thing for SMS and SCCM. WSUS related configuration on the NAC will work.

Faisal, any advice???

Thank you

Re: NAC and Microsoft SMS

Faisal Sehbai — Wed, 16 Jun 2010 22:51:52 GMT

Hi,

I'm not sure how tightly integrated SCCM/SMS and WSUS are, but when I said natively, I meant that CCA only has the requirement types for WSUS. For the others you'll have to rely on File Checks and/or Registry Checks.

HTH,

Faisal