11-10-2012 10:48 AM - edited 03-10-2019 07:46 PM
Cisco NAC agent takes long time to popup or run on Windows 7 machine.
The client machine is windows 7, running nac agent 4.9.0.42, against ISE 1.1.1
Any ideas how to reduce NAC Agent timing?
11-10-2012 06:03 PM
Did you try to disable the l3 swiss delay and reduce some the timers...httpa discovery etc.
Also there is a bug in the current compliance modulr where the current wsc.dat files causes long posture time. You can delete this file from the nac agent directory and see if these suggestions help.
Thanks
Sent from Cisco Technical Support Android App
11-12-2012 12:07 PM
I have disabled the l3 swiss delay, reduced timers & removed the compliance module from client provisiong policy but no luck still it is taking time. Any other suggestion please.
Usually how much time nac agent takes to come up?
11-15-2012 03:53 PM
You maybe hitting bug CSCub80143
Please rate if it helps
11-15-2012 03:54 PM
Eduardo,
That is what i initially suggested, doesnt look like that fixed their issue.
Tarik Admani
*Please rate helpful posts*
11-16-2012 12:07 AM
Any other suggestion please
Sent from Cisco Technical Support iPhone App
11-21-2012 04:05 AM
Hi Tariq,
Is there any way to run the nac agent in background without displaying to client ?
Please waiting for response.
Thanks
04-21-2013 06:10 AM
Hi Tariq,
I'm facing the same issue with ISE 1.1.1 (268) with Agent 4.9.0.47 for Windows XP clients. I have already configured "yes" to disabled the l3 swiss delay and reduced the httpa discovery timer from 30 to 05 sec but still clients get aprox 2.30 minutes to popup and finished the posture discovery.
Can you please advise if this is the minimum time or what is the minimum time and what are the parameters to set to a minimum time to complete agent popup and posture discovery..?
Is there any option that we can run this on backgroup..?
thanks in advance..
04-21-2013 10:55 AM
Please try giving lower values to Http discovery process timeout. The valid range is 3 and above
04-21-2013 04:52 PM
Hi,
Can you please provide the acl configuration for the "agent redirect" scenario as well. Also when you use wireshark do you see communication to the ISE PSN during the delay?
I have verified that the nac agent service will not start till the netlogon process completes, you most likely will see this when a machine is locked and unlocked. You many need to consider opening AD ports and that will speed up the communication.
Thanks,
Sent from Cisco Technical Support iPad App
08-07-2013 01:15 AM
Hi
Please I have the same problem
what are the parameters to set to a minimum time to complete agent popup and posture discovery.
Thanks
08-17-2013 03:23 AM
09-18-2013 11:59 PM
Hi,
Use the NAC Agent 4.9.2.8
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide