Network Access Control

Hello Friends,
I'm trying to use DHCP Enforcer plug-in(ver.11.05) on Windows 2008 Server. Both Enforcer Plugin and DHCP services are running correctly and i see DHCP Enforcer on SEP Manager under servers. But the client's network connections still same,the default gateway on the client doesnt drop or subnet mask doesnt 255.255.255.255 when the client is running or compliance rules failed.
I checked the document about DHCP Enforcer and i saw a requirement like Windows 2000 Server SP4,Windows 2003 with Service Pack and Windows 2003 with Service Pack 1.
Anybody have an idea about this problem?
Is  DHCP Enforcer Plug-in really doesn't work on Windows 2008 DHCP servers or is there any procedure to work with Windows 2008

Regards,


Oykun

My guess is that the plug in is windows 2008 is not supported for the plug in yet.

 Only Windows 2000 and 2003 servers are supported yet.
Once DHCP enforcers will start supporting Windows 2008 servers it will be notified in the release notes
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/11.0/manuals/ru5/Release_Notes_for_Symantec_Endpoint_Protection_11_0_5.pdf

 Hello
Thanks for your replys.I saw the same thing on the enforcer document about no support for Windows 2008 and DHCP,however now i tested the Windows 2008 with DHCP and SEP MANAGER and the DHCP Enforcer plugin, the plugin works well,i found the problem that why clients couldn't communicate with dhcp. The problem occured from Windows 2008 firewall,after i closed the firewall everything's work fine.

Thanks again.

Regards,

 Ohh ...thats good to know/...

Yeap that's a good clue but i still problems with customer side,DHCP Enforcer doesn't work on 64 bit Windows 2008 DHCP,actually all the services works fine but the clients don't fall quarantine subnet when the nac client is not working or non compliant.
Have you got any ideas about this problem or is there 64bitt version of DHCP enforcer?

Regards,


Oykun

 Hello,
The problem solved. :) Dhcp enforcer plug-in can work in Windows 2008 but not any 64bit systems.

Regards.