Network Access Control

there is some bug in SNAC GW Enforcer v11.5 (I dont check older ones) that when we using and enable trunking it is almost impossible to download on-demand client, download speed of downloading on-demand client is from 100 to 200bytes/s so... its close to 0, it take about 1h to download full on-demand client!!! generally everything working ok but this on-demand client download, so its a bug, but can anybody have an idea how to workaround this??

i have pilot implementation of SNAC in some big energetic company and its some issue for me that this is not working :((
My idea was to install second GW Enforcer without trunking only for serving on-demand client installation, but here comes another problem/bug...
to do that i have to chenge http redrect ftom http://localhost to http://secondgwenforcer and ql, but it just not working, externel client still receive the same first enforcers redirect address :((

terrible, generally its possible to manually connect to second enforcer and easy and fast downloac on-demand client but i have to let it make automatically to connect externel client to connect on-demand client download page,

any ideas guys? maybe technical support can help and check this for me?

thanks for help


 

This really sounds like a case that would be best handled by calling Symantec support.
If this is a bug then support would be the best resource for providing a workaround.

Keep us posted on the outcome.

http://www.symantec.com/business/support/contact_techsupp_static.jsp

Best,
Thomas

case id: 320-235-955

yep looks like a bug,

after disabling trunking
conf adv trunk dis
conf adv trunk  chall-vlist 1

and of course connect it to normal native vlan 1... situation looks even strange (with on-demand client only)
when externnal client try to connect to www... he is redirected and redirected and redirected over and over again without any page show oo :((
after 2h of thinking whats going on... I just switch enbforcer in training mode (from SNAC Manager) and... after 1min all looks ok, www works (open its a learn/logging mode so it have to work ok) and I can normally download on-demand client (when i manually type enforcer address in IE), ok so I switch it again to enforce mode and... now everything is ok I cant use www and Im good redirected for on-demand client and I can download on-demand client and everything working ok :)

when I checked same situation on trunking enabled... I just still cant download on-demand client :(

cant U just move management address to another free ethernet interface of this appliance? It will solve this problem I think.

Dawid

Confirmed that "on-demand client download on trunks is not supported in 11.5".

and this feature will be there in next release, hope this information helps.

Thanks
Figo

thanks guys :)

regards
Dave