Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAC 4.8 web agent with WSUS checking

Hi,

In some cases we would like to use the NAC 4.8 Web agent to check the WindowsUpdate  related things.

We have a managed WSUS server, the ckeck working well with native win32 clients, but when we try connect with web agent,

the report show the following:

    • Information:
      Failed to find Windows updates
    • Description:
      Missing windows updates: 0

At the Windowsupdate.log file there is NOTHING about it, nor connecting, or any related.

Tried with the activex and Java client, the result is same. Also tried to catch some ip packets with Wireshark going to wsus server, but there is active connection.

Is this a bug, or the web agent is not WIndowsUpdate check compatible?

Thanks

Attila

4 REPLIES

Re: NAC 4.8 web agent with WSUS checking

Hello. NAC Web agent doesn't trigger windows updates. The option you have is to type a link to the windows patch in the "requirement". If NAC web agent detects the patch is missing, it will show that link to the final user, so that user could remediate manually.

New Member

Re: NAC 4.8 web agent with WSUS checking

It is ok,but

"If NAC web agent detects the patch is missing"

The main problem that agent is NOT detects the installed patches, there is no activity at windowsupdate.log.

Attila

Re: NAC 4.8 web agent with WSUS checking

We'll have to check the "requirement rules" assigned to the particular role you're using, also the relevant  "requirements" and "rules". That's what tells the NAC web agent what patches to look.

New Member

Re: NAC 4.8 web agent with WSUS checking

Hi Eduardo,

We can check all the requirement rules, but notes,

this check is works well with native win agents, so I assume the CAM Requirements and Rules side is ok.

Pls. confirm, there is no matter how I'd like to check win patches (via web or with client) at Checks/Rules/Roles/Requirements config.

Attila

325
Views
0
Helpful
4
Replies
CreatePlease login to create content