Clean access host based policy

[joshstroup]

Our organization is using clean access, and I am trying to get host based policies to work. The cisco support person told me we have a problem with asymmetric routing in our network which is causing DNS traffic to go through the CAS but not back through it on the return route.

I am wondering how to isolate and resolve this problem. Any help you could give would be greatly appreciated.

[pradeepde]

Create a host-based policy access for access to remediation sites when users are in quarantine role. Use the drop-down menu to choose Agent Quarantine Role

http://www.cisco.com/en/US/products/ps6128/prod_technical_reference09186a0080540637.html

[joshstroup]

Haha, I guess you did not read my original message which stated I was having a PROBLEM with host-based policies. I already know how to set them up; it's just they were not working ok.

Turned out I had an asymmetric route in our network, and fixing that allowed the DNS traffic to go both ways. It's working now.