Hi Mike We use WSUS checks ourselves - it avoid all the issues with Cisco rules wanting people to install patches that Windows Update doesn't think they need. We don't find it makes a significant difference to logon speeds, provided the hardware isn't borderline in the first place. We don't use it for Windows 2000 clients though, as logon times for W2K do seem to be longer. You do have to set the clients up to use a specific WSUS server if the CCA requirement says "local WSUS", so I don't think it's practical to use local WSUS for CCA but Microsoft for actual updates
Regards Max Caines IT Services, University of Wolverhampton Wolverhampton, West Midlands WV1 1SB Tel: 01902 322245 Fax: 01902 322777 > -----Original Message----- > From: Cisco Clean Access Users and Administrators > [mailto:[EMAIL PROTECTED] On Behalf Of Mike Diggins > Sent: 09 March 2008 00:23 > To: [email protected] > Subject: [CLEANACCESS] CCA & WSUS > > I'm contemplating using the WSUS checks instead of the Cisco supplied > checks. There are options to use either the Microsoft Servers > or your own > managed WSUS servers. Does the later option assume my Windows > clients are > already configured to use those local servers for updates? Without > changing the clients regular update server, can the client be > forced to > check against a local WSUS server for CCA authentication? Our > CCA mainly > serves wireless clients, and changing them to use our local > WSUS server > permanently is not an option. > > Is anyone using the Microsoft Servers for this? My quick tests found > logins were much slower and would of course depend on > Internet access to > work at all. > > -Mike >
smime.p7s
Description: S/MIME cryptographic signature
