Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 567

Appendix D System Rules and Reports
This report reports the event details for the hosts that are in an INFECTED or QUARANTINE state.
The QUARANTINE hosts must do Anti-virus DAT file updates before network access and the
INFECTED hosts must be cleaned before network access.
Activity: Security Posture: NAC Infected/Quarantine - Top Hosts.
•
This report details the hosts that are in an INFECTED or QUARANTINE state. The QUARANTINE
hosts must do Anti-virus DAT file updates before network access and the INFECTED hosts must be
cleaned before network access.
Activity: Security Posture: NAC Infected/Quarantine - Top Hosts.
•
This report details the hosts that are in an INFECTED or QUARANTINE state. The QUARANTINE
hosts must do Anti-virus DAT file updates before network access and the INFECTED hosts must be
cleaned before network access.
• Activity: Security Posture: NAC L2 802.1x - Top Tokens.
This report captures the distribution of NAC tokens for end hosts that use Layer 2 IEEE 802.1x
method to validate their posture. The possible NAC tokens values in this report are HEALTHY,
CHECKUP, INFECTED, QUARANTINE, UNKNOWN. The TRANSITION token is excluded
since it is an intermediate state.
Activity: Security Posture: NAC L2 802.1x - Top Tokens.
•
This report captures the distribution of NAC tokens for end hosts that use Layer 2 IEEE 802.1x
method to validate their posture. The possible NAC tokens values in this report are HEALTHY,
CHECKUP, INFECTED, QUARANTINE, UNKNOWN. The TRANSITION token is excluded
since it is an intermediate state.
Activity: Security Posture: NAC L2IP - Top Tokens.
•
This report captures the distribution of NAC tokens for end hosts that use Layer 2 IP method to
validate their posture. The possible NAC tokens values in this report are HEALTHY, CHECKUP,
INFECTED, QUARANTINE, UNKNOWN. The TRANSITION token is excluded since it is an
intermediate state.
Activity: Security Posture: NAC L2IP - Top Tokens.
•
This report captures the distribution of NAC tokens for end hosts that use Layer 2 IP method to
validate their posture. The possible NAC tokens values in this report are HEALTHY, CHECKUP,
INFECTED, QUARANTINE, UNKNOWN. The TRANSITION token is excluded since it is an
intermediate state.
Activity: Security Posture: NAC Static Auth - Top Hosts.
•
This report captures the hosts that are configured as static exceptions on the Network Access Device
(NAD). For these hosts, the NAD directly permits network access without consulting the posture
validation server.
Activity: Security Posture: NAC Static Auth - Top Hosts.
•
This report captures the hosts that are configured as static exceptions on the Network Access Device
(NAD). For these hosts, the NAD directly permits network access without consulting the posture
validation server.
• Activity: Security Posture: NAC Static Auth - Top NADs.
This report captures the Network Access Device (NAD) that are permitting end hosts into the
network as static exceptions. For these end hosts, the NAD directly permits network access without
consulting the posture validation server.
• Activity: Security Posture: NAC Static Auth - Top NADs.
78-17020-01
User Guide for Cisco Security MARS Local Controller
List of System Reports
D-27