Solved: NAC clean access agent (CCA) question

mohamed_makled · ‎02-16-2010

Hi,

Iam going through OOB NAC deployment and i have a question about the CCA agent that will be persistent on the clients machines , if a client leave his work with the laptop that has the CCA agent and will use it in home or any different network , will the agent affect on the laptop access in any different network or not??? and why??

waiting your replies

MAM

Faisal Sehbai · ‎02-16-2010

Mohamed,

No difference in other networks. All you will see if you capture the traffic from that client is an UDP packet every 5 seconds. Since there will be no CAS in your other networks, that will be ignored and nothing else changes.

HTH,

Faisal

View solution in original post

Faisal Sehbai · ‎02-16-2010

Mohamed,

No difference in other networks. All you will see if you capture the traffic from that client is an UDP packet every 5 seconds. Since there will be no CAS in your other networks, that will be ignored and nothing else changes.

HTH,

Faisal

mohamed_makled · ‎02-16-2010

Faisal

thanks for your reply.

please i have another question, if we integrate the NAC appliance with AD (enabling AD SSO feature) , will we need to do Mapping Rules on the CAM server or not ???

MAM

Faisal Sehbai · ‎02-16-2010

Mohamed,

You don't have to do mapping rules. You can place all your users in a single default role which you define when you're defining the AD SSO provider. If you want to place them in different roles, based on certain attributes from AD, then you have to use mapping rules, so short answer, no.

HTH,

Faisal