NAC - http-redirect

[immerm]

Hi,

I have a problem with http redirect function, it doesn't work neither from ACS config nor staticly through identity policy.

Does anyone have a idea what can be wrong ?

Address : 172.16.88.28

Interface : Async80

AuthType : EAP

PostureToken : Quarantine

Age(min) : 0

URL Redirect : http://192.168.134.10/nac

ACL Name : #ACSACL#-IP-Quarantine-42763b00

Revalidation Period : 1800 Seconds

Status Query Period : 30 Seconds

Current State : AUTHENTICATED

[pcomeaux]

When I first tested URL redirects, mine did not work either.

The ACL that applies to the user (in this case, a DACL Quarantine ACL from ACS) needs to block the user's access to the intended web page for the URL redirect process to be invoked. If the user is permitted access to the URL they are attempting to go to by the ACLs that apply to them, the user will not experience the redirect.

The 2nd thing to check would be whether the same ACL permits access to the 192.168.134.10 server so that once the URL redirect process kicks off, the user will not be denied access to the URL that you attempting to redirect to.

Please confirm these 2 items and then we can continue from there.

thanks

peter

[immerm]

Hi Peter,

used ACL is permit ip any any now, I can go to the intended page as well as to the internet.

Michael

[pcomeaux · Accepted solution]

Hi Michael -

Ok - if you can go to the internet and the intended page and have NAC enabled, you are right - your URL redirects are not working.

You need to change the Quarantine ACL that is downloaded from the ACS server to deny the access for the URL redirects to work.

Does this help?

thanks

peter

[immerm]

Hi Peter,

- Yes, it realy does.

Great thanks,

Michael