Hey Wendy,
In Vista, I don't think we check browsers, whereas in XP we do and that
is why it is failing. I don't know why the rules are setup like that,
might be some critical OS patches on XP that made it like that. So the
client is failing because they don't have IE6 or IE7.
I understand where you are coming from, however I think gmail and IE8
are two different situations - Gmail will always be in beta - IE8 is a
beta release designed for bug testing for the full release which has a
set date.
That being said, the Clean Access product team has never wavered in the
fact that they will not support betas or release candidates. This
happened with IE7 and it happened with XP SP2 and SP3 and Vista SP1. Its
always fun when those betas and RCs come out, but as with before there
will not be a check released for IE8 beta.
You can certainly create a copy of the rule and create a custom IE8
check to add into it, many customers have done that in the past.
An even better option IMHO is to use the WSUS style requirement instead
of the Windows Update style. That way instead of checking against
Cisco's rule set, the client will check against Microsoft's
WindowsUpdate.com and if it says its up to date it will return an OK to
the agent allowing the user to login.
Nate
SHIH, WENDY wrote:
Hi Nate,
Here is the log. Maybe I should say there is no checks for IE8 but it stops XP users but
allow Vista users to use it. Below is the log from a XP with IE 8 and the error message
is something like "you are missing a Windows update". I understand why we
don't want to support beta software but even Google mail is still in beta but we can't
tell people not to use gmail. Many universities support it officially. Thanks.
# Install Critical Windows Updates (Mandatory)
* Passed Checks:
pc_KB954593_MS08-052_XP
pc_Windows-XP-SP2
pc_KB950749_MS08-028_XP_SP2
pc_KB952954_MS08-046_XP_SP2
* Failed Checks:
pc_IE7_0, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Version starts with 7.0]
pc_Windows-XP-SP3, Registry Check
[\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion
contains Service Pack 3]
pc_Windows-XP-SP3-int, Registry Check
[\HKEY_LOCAL_MACHINE\system\CurrentControlSet\control\windows\CSDVersion equals
768]
pc_IE6_0, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Version starts with 6.0]
* Not executed Checks:
pc_KB923789_MS06-069_XP_SP2
pc_Flash_6r79_Registered_LC
pc_KB938127_MS07-050_XP_SP2_IE7
pc_Flash_6r79_Registered_UC
pc_KB951698_MS08-033_XP
pc_KB953838_MS08-045_XP_SP3_IE7
pc_KB953838_MS08-045_XP_SP3_IE6
pc_Flash_6_0_79
pc_KB952954_MS08-046_XP_SP3
pc_KB953838_MS08-045_XP_SP2_IE7
pc_KB953838_MS08-045_XP_SP2_IE6
pc_Windows-XP-SP2-int
* Description:
-----Original Message-----
From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On
Behalf Of Nathaniel Austin
Sent: Thursday, September 18, 2008 1:55 PM
To: [email protected]
Subject: Re: XP IE 8 beta failed cisco check but Vista IE 8 passed it
Hi Wendy,
AFAIK there is no check for IE8 Beta in Vista either. What check are you
seeing that covered under?
Nate
SHIH, WENDY wrote:
Hi,
I am not sure why Cisco Vista check allows IE 8 beta but failed the IE
8 in XP. Do any of you experience this issue?
Do you allow IE8 beta or tell users to uninstall?
If you allow it, are you just modifying the Cisco rule pr_xp_Hotfixes?
Thank you.
Wendy
