Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAC clean access agent (CCA) question

Hi,

Iam going through OOB NAC deployment and i have a question about the CCA agent that will be persistent on the clients machines , if a client leave his work with the laptop that has the CCA agent and will use it in home or any different network , will the agent affect on the laptop access in any different network or not??? and why??

waiting your replies

MAM

1 ACCEPTED SOLUTION

Accepted Solutions

Re: NAC clean access agent (CCA) question

Mohamed,

No difference in other networks. All you will see if you capture the traffic from that client is an UDP packet every 5 seconds. Since there will be no CAS in your other networks, that will be ignored and nothing else changes.

HTH,

Faisal

3 REPLIES

Re: NAC clean access agent (CCA) question

Mohamed,

No difference in other networks. All you will see if you capture the traffic from that client is an UDP packet every 5 seconds. Since there will be no CAS in your other networks, that will be ignored and nothing else changes.

HTH,

Faisal

New Member

Re: NAC clean access agent (CCA) question

Faisal

thanks for your reply.

please i have another question, if we integrate the NAC appliance with AD (enabling AD SSO feature) , will we need to do Mapping Rules on the CAM server or not ???

MAM

Re: NAC clean access agent (CCA) question

Mohamed,

You don't have to do mapping rules. You can place all your users in a single default role which you define when you're defining the AD SSO provider. If you want to place them in different roles, based on certain attributes from AD, then you have to use mapping rules, so short answer, no.

HTH,

Faisal

320
Views
0
Helpful
3
Replies