Cisco Nac Agent Requirement type Audit

[andreagentile71]

Hi experts,

i can configure a requirement type as audit (opposed to mandatory or optional), so the client will still access the network, the user will not be notified, and the information will be sent to the cas.

It is possibile to generate an email or similar automated process to notify administrators on these audits?

(version in use 4.7.2)

Thanks

Andrea

[Nate Austin · Accepted solution]

Hi Andrea,

In 4.7.2 there wasn't much you could do within the CAM itself - really you could just export them from the GUI into a spreadsheet and analyze based on that.

The CAM does have an API however that would allow you to export reports via scripting interfaces and give you all that information which you could then manipulate. You can access the CAM API documentation by browsing to:

https:///admin/api/cisco_api_doc.jsp

(The "getreports" function is likely what you would want to look into).

In version 4.8 and later there was a new "Reporting" section of the GUI that you can see more details about passed and failed requirements:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_report.html#wp1495842

Thanks,

Nate

[andreagentile71]

thanks for reply.

Andrea