I can see that NAC Certified devices can be cleared manually, or after a timer has expired. However, I want to know if the Certified device posture can be automatically re-assessed periodically For example, one of my checks is to ensure AV is running. If the user of that machine disables AV, will the machine be removed from the certified device list and the end user warned?
My understanding is that, no, this will not happen. On NAC deployments that I have been involved with, I've set a periodic timer to clear the certified devices list every so often, usually in the middle of the night.
My understanding is that, no, this will not happen. On NAC deployments that I have been involved with, I've set a periodic timer to clear the certified devices list every so often, usually in the middle of the night.
AS mor said, we need to create timer under the menu clean access... we usually set timer for early morning so that this happnes exactly few hours before users login and users can go through remediation process if they have to...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
