NAC and clients with newer AV definitions

[mladenp]

Hello,

I have following problem with NAC 4.1.3 - it's happen sometimes that clients have NEWER virus definition than in NAC rules and checks database.

And than clients can't get access to network. NAC rules updates are scheduled twice a day (should it be more frequently? ). Does anybody know how much are NAC rules in delay comparing to antivirus definition of AV vendors ?

Are there any workaround for such scenario ?

Regards,

Mladen

[gojericho0]

Mladen,

I used to have that problem as well so I set to check AV rules every hour. This seemed to remediate the issue with no performance loss.

Here a link as well if you want to check your AV rule setup

http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a00808a50c5.shtml#noupdate