Network Access Control

 View Only

Windows Dissovable agent issues with GW Enforcer 6100 SEP 12.1

  • 1.  Windows Dissovable agent issues with GW Enforcer 6100 SEP 12.1

    Posted May 02, 2012 05:44 PM
      |   view attached

    We are still trying to get going with our newly inline SNAC, but are seeing issues in testing with Windows On-Demand dissolvable agents.

    Our current test HI policies have all requirements (Any AV/Any Firewall) set to "Allow the Host Integrity Check to pass even if this requirement fails"

    Despite this, one our of every 4-5 tries on a single machine seems to go to "Network Access is Quarantined" but states Compliance status Check Passed.  Then we must have the client quit the agent.. then we manually remove the client from the client list in SEPM.  Upon reboot the agent works as expected most of the time.

    (briefly before saying this it says "Compliance status check has been disabled by an administrator")

     

    I checked here: http://www.symantec.com/business/support/index?page=content&id=TECH150652

    and here: https://www-secure.symantec.com/connect/forums/compliance-status-check-has-been-disabled-administrator

    but neither solutions are applicable.

     

     

    Infra Details:

    Windows On-Demand Agent Version:        12.1.1000.157

    Symantec Network Access Control Enforcer 6100 Series - v12.1.1000
    build 157, 2011-10-30,21:10


    We are looking for any help!  thanks in advance.

    Attachment(s)

    docx
    Doc2.docx   102 KB 1 version