Network Access Control

Hi,

In my network environment i have two dhcp servers. They are not in cluster, i just have two separeted servers providing 2 diferent sets of IP address.

Somehow, the SNAC is giving a lot of false-positives and giving the status of "Reject" to a thounsands of machines that are actually running the SEP client just fine (They are with the last signatures, up and running).

Looking at the logs, i faced with a trick point. If the clients authenticate on server A and do the SNAC procedures on server A, it gets the status of "passed" but, if the client autheticates on server A but the SNAC procedures on server B, it gets the status "Reject", even if it is ok.

Is this related? Does it make any sense? If not, why the SNAC is giving too much false positive status?

thanks,

This sounds like an issue that should be addressed by support. I would open a case ASAP.

Online - https://mysupport.symantec.com/
Phone - http://www.symantec.com/business/support/contact_techsupp_static.jsp

If the HI Requirement is same then both Enforcers should pass the Client..What HI requirement is it failing ? Virus Def check ?

And yes since this is Impacting thousands of machines I would suggest to open a case with Symantec.