NAC Agent takes long time to run

[Tabish Mirza]

Cisco NAC agent takes long time to popup or run on Windows 7 machine.

The client machine is windows 7, running nac agent 4.9.0.42, against ISE 1.1.1

Any ideas how to reduce NAC Agent timing?

[Tarik Admani]

Did you try to disable the l3 swiss delay and reduce some the timers...httpa discovery etc.

Also there is a bug in the current compliance modulr where the current wsc.dat files causes long posture time. You can delete this file from the nac agent directory and see if these suggestions help.

Thanks


Sent from Cisco Technical Support Android App

[Tabish Mirza]

I have disabled the l3 swiss delay, reduced timers & removed the compliance module from client provisiong policy but no luck still it is taking time. Any other suggestion please.

Usually how much time nac agent takes to come up?

[Eduardo Aliaga]

You maybe hitting bug CSCub80143

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?caller=pluginredirector&method=fetchBugDetails&bugId=CSCub80143

Please rate if it helps

[Tarik Admani]

Eduardo,

That is what i initially suggested, doesnt look like that fixed their issue.

Tarik Admani
*Please rate helpful posts*

[Tabish Mirza]

Any other suggestion please

Sent from Cisco Technical Support iPhone App

[Tabish Mirza]

Hi Tariq,

Is there any way to run the nac agent in background without displaying to client ?

Please waiting for response.

Thanks

[pemasirid]

Hi Tariq,

I'm facing the same issue with ISE 1.1.1 (268) with Agent 4.9.0.47 for Windows XP clients. I have already configured "yes" to disabled the l3 swiss delay and reduced the httpa discovery timer from 30 to 05 sec but still clients get aprox 2.30 minutes to popup and finished the posture discovery.

Can you please advise if this is the minimum time or what is the minimum time and what are the parameters to set to a minimum time to complete agent popup and posture discovery..?

Is there any option that we can run this on backgroup..?

thanks in advance..

[Saurav Lodh]

Please try giving lower values to Http discovery process timeout. The valid range is 3 and above

[Tarik Admani]

Hi,

Can you please provide the acl configuration for the "agent redirect" scenario as well. Also when you use wireshark do you see communication to the ISE PSN during the delay?

I have verified that the nac agent service will not start till the netlogon process completes, you most likely will see this when a machine is locked and unlocked. You many need to consider opening AD ports and that will speed up the communication.

Thanks,

Sent from Cisco Technical Support iPad App

[nicanor00]

Hi

Please I have the same problem

what are the parameters to set to a minimum time to complete agent popup and posture discovery.

Thanks

[manjeets]

Kindly review the below link :

https://techzone.cisco.com/t5/Identity-Services-Engine-ISE/Posture-Services-on-the-Cisco-ISE-Configuration-Guide/ta-p/221702

[M'Bouke Serge Cedric BESSE]

Hi,

Use the NAC Agent 4.9.2.8