Network Access Control

Hi,

I am consultant working from home.

My client provided me :
Cisco vpn client -Version - 5.0.05.0290
Symentic Protection Agent 5.1.
RSA secure Token.

I installed all these softwares on my  Laptop (windows Vista ).
My client didn't provides antivirus, this has to manage by the consultant. So I purchaesd and installed Norton Antivirus 360.
After the installation when I am trying to connect to VPN, I  am getting the Error "Host Integrity requirement "AntiVirus Enforcement" failed".
Below is the error in Symantic protection Agent->log viewer->Security Log.

--- "Symantec Protection Agent" ---
 Symantec Protection Agent is running
 Firewall Enforcement criteria is met.
Host Integrity requirement "Symantec Protection Agent" passed
--- "Service Pack - XP SP2" ---
 Check OS criteria does not apply
 Service pack enforcement ignore
Host Integrity requirement "Service Pack - XP SP2" passed
--- "Service Pack - Win2k SP4" ---
 Check OS criteria does not apply
 Service pack enforcement ignore
Host Integrity requirement "Service Pack - Win2k SP4" passed
--- "Service Pack - Win2003 SP1" ---
 Check OS criteria does not apply
 Service pack enforcement ignore
Host Integrity requirement "Service Pack - Win2003 SP1" passed
--- "AntiVirus Enforcement" ---
 Check any supported antivirus failed
 Antivirus Enforcement criteria is not met
Host Integrity requirement "AntiVirus Enforcement" failed

Sometime I am able to connect also but usually not. Before trying to connect  to vpn, I always ran live update and Norton Scan but Still this error occurs. I also tried by uninstalling Norton Antivirus 360 and Installed NIS 2007,NIS 2008,NIS 2009,NIS2010 but nothing works.


Please help me to get rid of this error.

Thanks & Regards,
Sumit Tiwary.

What is the Host Integrity requirement of the clients network? Find out if you need an specific brand and version of AV installed on your client to pass HI.

Thank you for responce.

I am not sure, What is the Host Integrity requirement.

For Anti Virus, They asked me to Install Norton 2007 or Norton 2008. But as these Antivirus are not available in Market and also its not supports to Vista. Somehow I able to get NIS 2007 to installed in my laptop but that also doesn't work.

I observed, When I go to the properies->compatibility Mode of Symentic Protection Agent 5.1, I didn't find Windows Vista on the list.

Could you please confirm, If this is an issue?

You need to find out what version of 5.1 that your customer is using. I know the older versions are not compatible with Vista. If their AV requirement calls for Norton 2007/08 then that is what the system is looking for to pass HI. Your customer may need to get their IT department involved in setting up a HI rule to allow your system with a newer AV product to connect to their network.