06-24-2010 06:22 AM - edited 02-21-2020 04:00 AM
Hi,
Trying to implement the NAC Appliance 4.7.2 with NAC Agent (same version of course - 4.7.2.10).
One of our Reqirements is based local WSUS check, with Severity validation /Custom(All) settings.
Is it normal that all of our Windows XP client have to wait about 2 minutes for a successful WSUS Checking?
(Only checking, not for remediation).
The Windowsupdate.log shows the following:
We are trying to rebuild the %WinDIR%/SoftwareDitribution/DataStore database (delete, wuaucult/detectnow) according some reference founded in web,
but no success.
Any tip, or working example with lower checking time is wellcome.
Thanks in advance
Attila
05-12-2011 11:29 AM
Hi Attila
,
How are you doing?
So, my experience about WSUS requeriments are the same.
I recommend you to the WSUS requeriment with cisco rules, cuz the Severy the Agent do not have any policies to go to check Until the WSUS, check files, and download the KBXXXXX.
* Severity - Until today I do not know how to check differential criticism.
I know the way using Cisco Agent Severity lacks clearly what to check or not. Cisco Agent then sends the Windows Update Agent to go to the WSUS server and compare what you have on your machine. If something has to be installed, is downloaded and installed automatically.
But you imagine if the customer has a WSUS server with 2000 + files (KBs). The Agent will have to read the whole basis of the WSUS server, compare with the machine and see if some file is missing or not.
It takes too long. A LOT. About 2 minutes even.
I advise you use the mode "Cisco Rules. Much more efficient and fast.
Requires better management than the way "severity" but you will have better performances in check.
Create a check, create a Rule (put one or more checks within the Rule), put the Rule in Requeriment. Test this.
Report if you test this or another way.
Tiago Andrade
06-01-2011 12:42 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide