topic NAC - http-redirect in Network Security

NAC - http-redirect

immerm — Fri, 21 Feb 2020 08:07:21 GMT

Hi,

I have a problem with http redirect function, it doesn't work neither from ACS config nor staticly through identity policy.

Does anyone have a idea what can be wrong ?

Address : 172.16.88.28

Interface : Async80

AuthType : EAP

PostureToken : Quarantine

Age(min) : 0

URL Redirect : http://192.168.134.10/nac

ACL Name : #ACSACL#-IP-Quarantine-42763b00

Revalidation Period : 1800 Seconds

Status Query Period : 30 Seconds

Current State : AUTHENTICATED

Re: NAC - http-redirect

pcomeaux — Tue, 03 May 2005 12:35:37 GMT

When I first tested URL redirects, mine did not work either.

The ACL that applies to the user (in this case, a DACL Quarantine ACL from ACS) needs to block the user's access to the intended web page for the URL redirect process to be invoked. If the user is permitted access to the URL they are attempting to go to by the ACLs that apply to them, the user will not experience the redirect.

The 2nd thing to check would be whether the same ACL permits access to the 192.168.134.10 server so that once the URL redirect process kicks off, the user will not be denied access to the URL that you attempting to redirect to.

Please confirm these 2 items and then we can continue from there.

thanks

peter

Re: NAC - http-redirect

immerm — Tue, 03 May 2005 12:51:28 GMT

Hi Peter,

used ACL is permit ip any any now, I can go to the intended page as well as to the internet.

Michael

Re: NAC - http-redirect

pcomeaux — Tue, 03 May 2005 20:22:14 GMT

Hi Michael -

Ok - if you can go to the internet and the intended page and have NAC enabled, you are right - your URL redirects are not working.

You need to change the Quarantine ACL that is downloaded from the ACS server to deny the access for the URL redirects to work.

Does this help?

thanks

peter

Re: NAC - http-redirect

immerm — Fri, 06 May 2005 15:28:37 GMT

Hi Peter,

- Yes, it realy does.

Great thanks,

Michael