we have installed nac for our customer and it works fine ,but the customer want the change the version of kaspersky antivirus from 6 to 8 end point security ,when we have try this the nac agent does not find the antivrus on the the workstation .
i want to know if this version of kasoersky (end point security ) is supported by nac ,if no is ther a solution to make it works with the NAC .
Kaspersky Endpoint Security V 8 is supported with Nac client version 18.104.22.168 or higher AND compliance module 22.214.171.124 or higher. I am not sure if that version of the compliance module will import into 4.7.X.
The most recent agent is 4.9.1 and the most recent compliance module is 3.5.771.2
Hello the Compliance module is a piece of software made by a 3rd party called OpSwat. This module is what allows the NAC agent to properly detect Antivirus and antispyware applications. In older version of Cisco Nac Prior to 4.8 to upgrde the compliance module you had to upgrade the agent in 4.8 the way this works changed quite a bit below is an excerpt from the 4.8 cam/cas release notes:
Cisco NAC Appliance Release 4.8 introduces the Compliance Module feature to help administrators keep client machines as up-to-date with imposed security policies as possible. Traditionally, administrators would need to wait for a new version of the Cisco NAC Agent and/or Mac OS X Agent to provide the most up-to-date AV/AS support for client machines logging into the network. Now, with the Compliance Module feature, the AV/AS support updates have been "decoupled" from the Agent package and can be made available to users' client machines more frequently, thus providing greater support for up-to-date AV/AS vendor applications.
Again please note that to get this feature you must do a full upgrade this means upgrading all Cas/Cam/Client in your enviroment to at least 4.8.2 or higher. I do not believe you will be able to have Kaspersky Endpoint V8 supported while running 4.7.X unless you write a custom check.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...