Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAC - AV Definition Rule Error Message

Hello,

I have a NAC 4.9(3) with a Virus Definition rule for McAfee 8.8.x that is showing this error message:

error_rule.JPG

From this error, It seems that winxp and win2k are not supported by this virus definition rule (for the installation it works fine), but from the AV rule config I only can select "Windows All" so I can not exclude from there winxp and win2k.

In the requirements config I can choose what version of windows to work with and there I didn't select winxp and win2k (just for testing) but the problem remains.

Any ideas??

Thanks in advance.

3 REPLIES
Cisco Employee

NAC - AV Definition Rule Error Message

Hi

Regarding to your query, please do the following steps:

To view administrator reports for the Agent, go to Device Management > Clean Access > Clean Access Agent > Reports. To view information from the client, right-click the Agent taskbar icon and select Properties.

When troubleshooting AV/AS Rules, please provide the following information:

1. Version of CAS, CAM, and Agent.

2. Client OS version (e.g. Windows XP SP2)

3. Name and version of AV/AS vendor product.

4. What is failing—AV/AS installation check or AV/AS update checks? What is the error message?

5. What is the current value of the AV/AS def date/version on the failing client machine?

6. What is the corresponding value of the AV/AS def date/version being checked for on the CAM? (See Device Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info.)

New Member

NAC - AV Definition Rule Error Message

Hi Muhammad,

The problem is that I can't get this rule enabled in the NAC configuration, right now for my role requirement the only one that is working is the "Install" rule but no the "Virus Definition".

As soon I clic "Save Rule" I get the error message that it's on the picture. Here you have the information:

1. Version of CAS, CAM, and Agent.

CAM and CAS 4.9.3

Agent 4.9.3.5

2. Client OS version (e.g. Windows XP SP2)

Windows XP

Windows 7

Windows 8

3. Name and version of AV/AS vendor product.

McAfee v8.8

4. What is failing—AV/AS installation check or AV/AS update checks? What is the error message?

AV update rule

5. What is the current value of the AV/AS def date/version on the failing client machine?

The rule is not being enabled in the NAC Manager

Thanks in advance for your help.

Cisco Employee

Re: NAC - AV Definition Rule Error Message

Hi Alfonso,

The requirement must be corrected and made valid before it can be used. Typically requirements/rules become invalid when there is an operating system mismatch.

The Clean Access Manager automatically validates requirements and rules as they are created. The Validity column under Device Management > Clean Access > Clean Access Agent > Requirements > Requirement List displays a blue checkmark if the requirement is valid and a red "X" if the requirement is invalid.

Highlighting red "X" icons (if any) with your mouse reveals which rule and which check is causing the requirement to be invalid.

To Correct an Invalid Requirement:

Step 1 Go to Device Management > Clean Access > Clean Access Agent > Requirements > Requirement-Rules.

Step 2 Correct any invalid rules or checks as described in Valid.

Step 3 Select the invalid Requirement Name from the dropdown menu.

Step 4 Select the Operating System.

Step 5 Make sure the Requirement met if: expression is correctly configured.

Step 6 Make sure the rules selected for the requirement are valid (blue checkmark in Validity column).

Moreover kindly make sure that all rule configuration steps are according to the given below link:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cam/m_agntd.html#wp1354971

295
Views
0
Helpful
3
Replies