nac agent delayed befor popup

Unanswered Question
Nov 11th, 2009

Dear ,

i install nac system and working fine, but when the user loging in , the agent delay about 10 minutes before popup to the user, i don't know why the agent don't appear immedaitly after the pc finish startup.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Ali mosbah Abdo Wed, 11/11/2009 - 09:17

first i deployed L2 OOB & L2 IN-band,and the problem happen for L2 OOB Users,

and the discovery host is the CAM Manager IP Address.

Ali mosbah Abdo Wed, 11/11/2009 - 09:59

sir, the discovery host i added it in the CAM , but i don't add any discovery host ip address in the agent it self.

Faisal Sehbai Wed, 11/11/2009 - 10:46

Check your agent properties to see if it has a discovery host listed in there. If so, what is it?


I believe what you are encountering is the fact that the agent, installed on the user's PC, is a user program, not a service (assuming you are talking about a windows system here). This being the case, there is no control over when the agent will load other than it happens after the system fully logs the user in and brings up the desktop.

Unfortunately, there isn't a way to change that behavior.

Ali mosbah Abdo Wed, 11/11/2009 - 12:11

dear michael

the users behind the L2 IN-band don't have this problem , just users in the brach deployed as L2 OOB.

if this is normal behavior so shuold all users have the same problem.

what you think

Faisal Sehbai Wed, 11/11/2009 - 12:20

Put in the CAM as the discovery host in the agent properties and then see how long it takes for it to pop up.

Let us know!



Ali mosbah Abdo Wed, 11/11/2009 - 13:47

ok, but i have to do this by tommorrow, because the time now in my country 12:00 am at mid night.

i will add the discovery host to the agent and i will reboot the pc and i will see.

i hope this is the problem.

by the way , the cisco document says about the discovery its for L3 deployment. and i have L2 deployment.

but i will test and i will tell you.


I only use OOB configurations, so I haven't tested IB configurations. However, you may see some issues in both configurations since the agent needs send user/PC information to the CAM.

In our setup, the fact that the agent doesn't load until after the desktop comes up has produced a delay in total login time that can reach 20 minutes (I've timed it), depending on the situation. I haven't yet been able to determine what MSoft is trying talk to that it can't (the delay is waiting for a bunch of things to time out).

Now, if the desktop is loaded and all user programs are running and it still takes 10 minutes for the popup, then the issue is probably with the discovery host (or lack of one) as you have been discussing with Faisal.

Ali mosbah Abdo Thu, 11/12/2009 - 04:22

dear sir,

i add the discovery host to the agent and restart the pc, but its still take the long time to appear the agent login screen.


This Discussion