I have been attempting to get NAC deployed in the last month. I have come up with a few issues.
I upgraded to 4.8 and that went smoothly. I have an in-band deployment and will be using an ASA VPN connections
once I get everything working correctly. A couple of the issues I've experienced are:
- Windows NAC Agent. I have the NAC Agent installed on a couple of virtual workstations and get no login option and the Agent just does not seem to be communicating with the server. I can do a Web based check on systems but not using the Windows Agent. I need to use the windows agent. I've searched through the documentation and did not find too much information on how to t/s this. There is SOME and I have checked out all of the suggestions with no luck. Any ideas on what to check?
- Check and Rule updates. I have had updates running daily for about two weeks and only seem to get updates on virus signatures, etc. There have been no checks pushed on operating system issues. I know there have been some microsoft patches put out in the last couple of weeks but there is no sign of them in the checks. Is there a configuration item I am missing or is it just that these updates only come once a month or so?....in our implementation we need to get all updates checked immediately. I'd rather avoid having to manually create checks all the time....
- Snapshots. I am currently doing most of my work in a lab environment for testing. I intend to deploy the appliances to one of our remote locations in the next couple of weeks. We have additional NAC appliances which we are going to stand up in our home office location. I attempted to take a snapshot from the appliance I am currently using and upload it to another. Hard to tell if it works or not. I get a warning that it must be a valid file...hit OK and I don't believe anything really happens. I don't see any kind of entry in the event log. What I would LIKE to happen is to be able to configure new rules, etc at our home office and be able to deploy this by some sort of upload rather than having to create them twice. Is there a way to do this?
I have a few more questions but will save them for later. Any assistance is greatly appreciated!