NAC appliance - helpdesk access to unauthenticated machines

[jwjorgensen]

Has anyone ran into a situation where a helpdesk group needed to be able to remote into a machine to install NAC agent or other software when the machine is on the unauthenticated vlan?

I do not want to open up traffic to the helpdesk subnets on the unauthenticated role if I don't have to.  Has anyone figured out a better way to do this?

[Faisal Sehbai]

Hi,

Unfortunately the CAS doesn't have a stateful firewall, and you have to specify the return traffic in your rules to be allowed through.

HTH,

Faisal