Cisco NAC - How know why a machine is in Temporary Role?

[Daniel Stefani]

Hello,

In our environment, workstatios that do not conform with the requirements remain under Temporary Role until the remediation is done.
In Event Logs I see that the Workstation is just under Temporary Role, but do not know why it is in Temporary Role.

How can I see this information?

Ex:

Authentication

2011-01-21 11:12:26

[00:21:9B:37:00:F0 ## x.x.x.x] user@domain - Successfully logged in temporary role, Provider: ADSSO, L2 MAC address: 00:21:9B:37:00:F0, Role: Temporary Role, OS: Windows XP Pro/Home

Tanks

Daniel Stefani

[Federico Lovison]

Hi Daniel,

you can check the info about this user/machine on the NAC agent reports:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_report.html#wp1481407

There you get details about what checks failed on the client during the posture assessment phase.

I hope this helps.

Regards,

Federico

--
If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.