06-09-2008 06:50 AM - edited 02-21-2020 10:21 AM
I have a question about NAC & Windows Logon. I currently have a Cisco 3560 as the Network Access Device. Cisco ACS Solution Engine is running 4.1.1.23(3) for my ACS Server. I'm doing internal posture for Active Directory Auth, and External Posture for Trend Micro AV. Clients have the CTA + Supplicant installed.
When I logon to Windows upon booting up I'm placed into the quarantine vlan and on the NAD (3560) the log shows CiscoTrustAgent Not Detected. If I disconnect cable and plug back in, everything works fine...my posture comes back healthy, I'm authenticated, and placed into the correct VLAN.
Any idea why it is different first logging into windows versus plugging in after logging in?
Thank You,
Kevin
06-13-2008 05:57 AM
This looks like a misconfig. Better enable the logging function in CTA run the command âctalogd enableâ from the command
line.
06-13-2008 06:02 AM
I was able to fix the logon to windows issue by changed the timers on the switch for the 802.1x authentications, quit timer, and tx timer. Does this normally need changed from default?
Kevin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide