cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
605
Views
0
Helpful
1
Replies
Highlighted
Beginner

Cisco NAC - How know why a machine is in Temporary Role?

Hello,

In our environment, workstatios that do not conform with the requirements remain under Temporary Role until the remediation is done.
In Event Logs I see that the Workstation is just under Temporary Role, but do not know why it is in Temporary Role.


How can I see this information?

Ex:

Authentication2011-01-21 11:12:26[00:21:9B:37:00:F0 ## x.x.x.x] user@domain - Successfully logged in temporary role, Provider: ADSSO, L2 MAC address: 00:21:9B:37:00:F0, Role: Temporary Role, OS: Windows XP Pro/Home

Tanks

Daniel Stefani

Everyone's tags (5)
1 REPLY 1
Cisco Employee

Re: Cisco NAC - How know why a machine is in Temporary Role?

Hi Daniel,

you can check the info about this user/machine on the NAC agent reports:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_report.html#wp1481407

There you get details about what checks failed on the client during the posture assessment phase.

I hope this helps.

Regards,

Federico

--
If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.