topic Re: NAC using WSUS server in Network Security

NAC using WSUS server

ralicaway — Sat, 22 Feb 2020 07:21:08 GMT

Hi,

Does anyone know how to use WSUS Server in NAC Appliance. I can able to authenticate in the network with the clean access agent. But everytime I used the WSUS requirement it pass through from normal login role to temporarily role for remediation. Im using a WSUS server. So it will lookup to WSUS requirement but the problem I cannot able to remediate using it, I got error message. Do I need to allow some ports in the network to make it work? What ports do I have to open? Please see attachment. Thanks.

Regards,

Richard

Re: NAC using WSUS server

Lauren Sullivan — Tue, 10 Aug 2010 13:01:52 GMT

Are you doing it against the Microsoft servers or an internal server? If Microsoft, you'll want to allow access to the normal update servers.

The WSUS log is stored under %windir&/WindowsUpdate.log, so you can check that to see what errors WSUS itself is reporting.

Re: NAC using WSUS server

ralicaway — Wed, 11 Aug 2010 10:15:27 GMT

Hi Lauren,

What do you mean by against the microsoft server? I have setup a microsoft server which I made it as a DC,DNS,DHCP and WSUS Server. I want my client users to authenticate to microsoft server as well as getting updates to the WSUS server. I dont know if my nac sever is communicating to the WSUS server for getting updates, it shows an error message to nac agent. Do you know how can I able to make my WSUS server and nac to work? Thanks a lot for the reply.

Richard

Re: NAC using WSUS server

Faisal Sehbai — Fri, 13 Aug 2010 11:29:21 GMT

Richard,

When you use WSUS with NAC, all the NAC agent does is to tell the Windows Update agent to go update itself. Now it depends on the WSUS setting on the client where it will go to check for updates. If you have it configured for MS servers, it will go talk to them. If you have your clients configured for internal WSUS server, it will check in with them.

Here are details on how to set the registry keys for both scenarios (AD and non-AD)

Non-AD: http://technet.microsoft.com/en-us/library/cc708449%28WS.10%29.aspx

AD: http://technet.microsoft.com/en-us/library/cc720539%28WS.10%29.aspx

HTH,

Faisal

Re: NAC using WSUS server and AV

ralicaway — Sun, 15 Aug 2010 05:38:28 GMT

Thanks Faisal, that really helps me to configure my WSUS server properly. Now the client workstation gets updates from the WSUS server.

One more question dude how about the anti-virus, currently I have setup an McAfee server. How will the client gets update to the AV server through NAC. What I saw from the manual of the nac there is no function of pointing the AV rule to the AV server to gets update. Or just need to setup the requirement for the AV in the nac and the AV itself will be the one to map to the AV server.. Please let me know about the function of it. Thanks.

Richard

Re: NAC using WSUS server and AV

Faisal Sehbai — Sun, 15 Aug 2010 09:10:38 GMT

Richard,

This again is the function of the AV program. The program has to know where to get its updates from. If it's a managed program then you can more than likely make it point to an internal AV server first, and then hit the internet.

Checking out the Mcafee documentation to see if they support such a thing would be a good place to start.

HTH,

Faisal