Cisco OL-4015-08 User Manual page 616

NAC Status
Clicking on an interface entry displays the information returned by posture agents
installed on the hosts in the subnet for that interface. An example of the interface
information follows:
10.10.10.5
10.10.10.1 is the host's IP address. Remote EAP Policy is the type of
authentication policy that is in force. The host's current posture is Infected, and it
has been 12 minutes since the host completed the admissions control process.
This area of the window contains no data if no posture information is returned by
Note
the hosts on the selected subnet.
The authentication types are:
The posture agents on the hosts may return the following posture tokens:
Cisco Router and Security Device Manager Version 2.2 User's Guide
32-16
Remote EAP Policy
Local Exception Policy—An exception policy that is configured on the
•
router is used to validate the host.
Remote EAP Policy—The host returns a posture, and an exception policy
•
assigned by an ACS server is used.
Remote Generic Access Policy—The host does not have a posture agent
•
installed, and the ACS server assigns an agentless host policy.
Healthy—The host is free of known viruses, and has the latest virus
•
definition files.
Checkup—The posture agent is determining if the latest virus definition files
•
have been installed.
Quarantine—The host does not have the latest virus definition files
•
installed. The user is redirected to the specified remediation site that contains
instructions for downloading the latest virus definition files.
Infected—The host is infected with a known virus. The user is redirected to
•
a remediation site to obtain virus definition file updates.
Unknown—The host's posture is unknown.
•
Chapter 32 Viewing Router Information
Infected 12
OL-4015-08