Cisco Ise 13 User Guide
Here you can view all the pages of manual Cisco Ise 13 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 601
Pleaselaunchtherequiredremediationprogram(s)beforeaccessingthenetworkPleaseupdatethevirusdefinitionfileofthespecifiedantivirussoftwarebeforeaccessingthenetwork(optional)Pleaseupdatethevirusdefinitionfileofthespecifiedantivirussoftwarebeforeaccessingthenetwork(required)Pleaseupdatethespywaredefinitionfileofthespecifiedanti-spywaresoftwarebeforeaccessingthenetwork(optional)Pleaseupdatethespywaredefinitionfileofthespecifiedanti-spywaresoftwarebeforeaccessingthenetwork(required)Pleasedownloadandinstalltheopt...
Page 602
MandatorySystemRebootRequiredYouneedtorebootyoursysteminorderforthechangestotakeeffect.UnabletoremediateparticularrequirementTheremediationyouareattemptingisreportinganaccessdeniederror.Thisisusuallyduetoaprivilegeissue.Pleasecontactyoursystemadministrator.Theremediationyouareattemptinghasfailedwithaninternalerror.Pleasecontactyoursystemadministrator.Theremediationyouareattemptingrequireselevation.Pleasecontactyoursystemadministrator.Theremediationyouareattemptinghadafailure.Iftheproblempersistscontactyo...
Page 603
Therehasbeenanetworkerror,pleasetrytheremediationagain.Ifthismessagecontinuestobeseencontactyoursystemadministrator.Theremediationyouaretryingtodocannotbeaccomplishedatyouruserlevel.Pleasecontactyoursystemadministrator.TheWSUSsearchfailed.Thisisprobablyduetoanetworkissue.Pleasetryagainandifthismessagecontinuestodisplaycontactyoursystemadministrator.AgentencounteredproblemslogginguserNetworkError:NACServercouldnotestablishasecureconnectiontoNACManager.Thiscouldbeduetooneormoreofthefollowingreasons:1)NACMa...
Page 604
NullsessionInvaliduserroleInvalidloginpageEncodingfailureAsecurityenhancementisrequiredforyourAgent.PleaseupgradeyourAgentorcontactyournetworkadministrator.CannotfindserverreferenceUserrolecurrentlydisabledAuthenticationserverisnotreachableAgentuseroperatingsystemisnotsupportedTheAgenthasencounteredanunexpectederrorandisrestarting.CleanAccessServerisnotavailableonthenetwork.Authenticationinterruptedduetonetworkstatuschange.PressOKtoretry.CleanAccessServerisnotproperlyconfigured.Pleasecontactyouradministr...
Page 605
Sample Extended nacStrings_xx.xml File...
Page 606
http://foo.foo.com/foo/AgentCustomizationPackage/1/1/1/7AgentCustomizationPackage2010-06-07T12:00:00ZThisisEFAgentCustomizationPackage1.1.1.7AgentCustomizationPackage1.1.1.7WINDOWS_ALL NotethefollowingpointswhilecreatingtheupdateFeed.xmldescriptorfile: •—Youmustalwayssetthisattributeto“WINDOWS_ALL”toincludealltheWindowsOS versionsthataresupportedbyCiscoNACAgent.SeeSupportInformationforCiscoNACAppliance AgentsforthelistofWindowsOSversionsthataresupportedbyCiscoNACAgent....
Page 607
Configure Client Provisioning Resource Policies Forclients,theclientprovisioningresourcepoliciesdeterminewhichusersreceivewhichversion(orversions) ofresources(agents,agentcompliancemodules,and/oragentcustomizationpackages/profiles)fromCisco ISEuponloginandusersessioninitiation. ForAnyConnect,resourcescanbeselectedeitherfromtheclientprovisioningresourcespagetocreatean AnyConnectconfigurationthatyoucanuseintheclientprovisioningpolicypage.AnyConnectconfiguration...
Page 608
ItismandatorytoincludetheclientprovisioningURLinauthorizationpolicy,toenabletheNACAgentto popupintheclientmachines.Thispreventsrequestfromanyrandomclientsandensuresthatonlyclients withproperredirectURLcanrequestforpostureassessment. Step 8ClickSave. What to Do Next Onceyouhavesuccessfullyconfiguredoneormoreclientprovisioningresourcepolicies,youcanstartto configureCiscoISEtoperformpostureassessmentonclientmachinesduringlogin. Configure Cisco ISE Posture Agent in the Client Provisioning Policy...
Page 609
Procedure Step 1ChoosePolicy>ClientProvisioning. Step 2ChooseEnable,Disable,orMonitorfromthebehaviordrop-downlist: Step 3EnteranameforthenewresourcepolicyintheRuleNametextbox. Step 4Specifythefollowing: •UsetheIdentityGroupsfieldtospecifyoneormoreIdentityGroupstowhichauserwhologsintoCisco ISEmightbelong. •UsetheOperatingSystemfieldtospecifyoneormoreoperatingsystemsthatmightberunningonthe personaldevicethroughwhichtheuserisloggingintoCiscoISE....
Page 610
Client Provisioning Event Logs Youcansearcheventlogentriestohelpdiagnoseapossibleproblemwithclientloginbehavior.Forexample, youmayneedtodeterminethesourceofanissuewhereclientmachinesonyournetworkarenotabletoget clientprovisioningresourceupdatesuponlogin.YoucanuseloggingentriesforPostureandClientProvisioning AuditandPostureandClientProvisioningDiagnostics. Cisco Identity Services Engine Administrator Guide, Release 1.3 564 Client Provisioning Event Logs