topic NAC - Not able to HTTPS into NAC Servers (CAS) in Network Security

NAC - Not able to HTTPS into NAC Servers (CAS)

yuchenglai — Fri, 21 Feb 2020 11:56:55 GMT

I was wondering if anyone has seen this issue. I am not able to HTTPS into my NAC Servers but I am still able to manage them via my NAC Managers. What would cause this?

Re: NAC - Not able to HTTPS into NAC Servers (CAS)

Faisal Sehbai — Sat, 01 May 2010 03:45:12 GMT

David,

What URL are you trying to access to manage your CAS's? If just the IP or Hostname, add /admin at the end, so the URL should look like this:

https://IP_ADDRESS_OF_CAS/admin

HTH,

Faisal

Re: NAC - Not able to HTTPS into NAC Servers (CAS)

yuchenglai — Sat, 01 May 2010 21:07:52 GMT

Classification: UNCLASSIFIED

Caveats: NONE

Faisal,

I used to be able to HTTPS into the VIP of my CAS pairs as well as their physical IP addresses. It is strange that the NAC Manager is able to "manage" these CAS pairs even though I am no longer able to HTTPS into them nor ping them via their HA VIP nor via their individual physical IP addresses. Yes, I do know how to web console into my CAS pairs using their VIP and physical IP addresses.

David Lai

Network Engineer

Brooke Army Medical Center

Office: 210.916.3644

Desk: 210.916.7488

David.Lai@amedd.army.mil

Re: NAC - Not able to HTTPS into NAC Servers (CAS)

Faisal Sehbai — Sun, 02 May 2010 23:06:00 GMT

David,

The network you're trying to access your CASs from, is that network part of the CASs Managed Subnets?

Faisal

Re: NAC - Not able to HTTPS into NAC Servers (CAS)

yuchenglai — Mon, 03 May 2010 13:52:52 GMT

Classification: UNCLASSIFIED

Caveats: NONE

Faisal,

That is affirmative. I was trying to access my CASs from a "managed subnet." Thank you pointing that out. I think that was why I was not able to access my CASs. I will try to access them again from an "unmanaged subnet."

Thanks your time and expertise Faisal!

David Lai

Network Engineer

Brooke Army Medical Center

Office: 210.916.3644

Desk: 210.916.7488

David.Lai@amedd.army.mil

Re: NAC - Not able to HTTPS into NAC Servers (CAS)

Faisal Sehbai — Mon, 03 May 2010 20:20:01 GMT

David,

Yeah, that won't work. All traffic for the Managed subnets is sent out the untrusted interface by default and since your client is on the trusted side, it would never reach it.

HTH,

Faisal