topic Re: NAC Temporary Role in Network Security

NAC Temporary Role

danielnunes — Fri, 21 Feb 2020 11:53:14 GMT

Folks, I am

configuring the NAC CAM 4.7.1 and I created two roles, Employ1 and

Employ2 but when that roles are into posture assessment with CCAA (Clean Access Agent) I saw that role Employ1 fall in Temporary role and Employ2 fall in Unauthenticated role, I don't know why that difference.

I want to put each profile with a specified quarantine role, How can I do this?

thanks a lot

Re: NAC Temporary Role

Faisal Sehbai — Thu, 25 Feb 2010 17:26:34 GMT

Daniel,

If using the agent, they go in the same quarantine role. It's called the Temporary Role. As for why one is working and the other failing, what sort of requirements are you using with those roles?

Faisal

Re: NAC Temporary Role

danielnunes — Sat, 27 Feb 2010 01:18:00 GMT

Hi Faisal,

At this moment, role Employ1 is using agent but there is no requeriments setup on role-requeriments and

Employ2 is using agent too and there are six requeriments setuped on role-requeriments.

thanks

Re: NAC Temporary Role

Faisal Sehbai — Sat, 27 Feb 2010 15:19:17 GMT

So which requirements is employ2 failing on? What about employ1?

What do the reports show?

Faisal

Re: NAC Temporary Role

danielnunes — Sat, 27 Feb 2010 18:28:45 GMT

Hi Faisal,

thanks for your attention.

Well, I saw that when I put requeriments on Employ1 for example WSUS requeriment and the client needs to update, that client fall in Unauthenticate role while Employ2 with the same WSUS requeriment fall in temporary role.

This way I had to generate ACLs in both roles Unauthenticated role and temporary role.

thanks

Re: NAC Temporary Role

danielnunes — Thu, 04 Mar 2010 19:14:32 GMT

Faisal,

attached, you can see that information.

Role Employ1 is using unauthenticted rol while Agent is performing posture assessment.

I'd like to know how can I change from unauthenticated role to Temporary Role While Agent is performing Posture assessment on client.

thanks a lot

Re: NAC Temporary Role

Faisal Sehbai — Fri, 05 Mar 2010 16:20:26 GMT

Daniel,

Okay I see what you're saying. Go to User Roles, Click on edit for the Temporary Role, and change the drop down for the Role type to Agent Temp Role.

HTH,

Faisal