ISE 2.1 : User Machine not compliant after posture remediation

[melvillec]

Hi All,

I am using ISE 2.1 and configuring the posture feature in a Wired environment. My client machine successfully downloads the antivirus software which I pre-defined for remediation.

After the client machine installs the AV, NAC agent(4.9.5) should ideally make the client machine Compliant, but it doesnt.

A Compliant Policy has already been defined.

After a shut/noshut on the Lan port of that user on the switch, the Machine once again goes into the Non-Compliant state and the whole process follows back again

Any clue as to what may be going wrong here....

Thanks..

[jan.nielsen]

What does the NAC agent say is going wrong? Did you give the pc a long enough window to actually install the AV ?

[melvillec]

Hi Jan,

Yes, the machine gets into a 5 minute timer of remediation during which the AV gets installed and still there is sufficient time left.

However, this timer gets expired and NAC doesnt detect the machine as being Compliant.

 The AV is detected by the NAC Agent.

Regards,

Melville