David,
That clears it up. I've seen this on my system as well. Random endpoints that fail a requirement do not show up in the Clean Access Agent Reports. I do notice that CCAA Reports do not update in a timely fashion. I've gone into the Report to figure out what requirement failed...can't find the endpoint in the report...go back into look up something else a period of time later only to find a report for the endpoint. Next time you notice this behavior check back 10-15 minutes later and see if the report on the endpoint is listed. My guess is that this is communication error between the CCA Agent gathering and forwarding the information to the CAM. I'm running 4.1.2.1 on CASs and CAMs and 4.5 CCA Agent. Is anyone experiencing this in a pure 4.5 environment...??? Supposedly the protocol used for Agent-CAS/CAM communication has been beefed up in 4.5. CH From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of David Pifer Sent: Wednesday, April 15, 2009 04:44 PM To: [email protected] Subject: Re: Users not appearing in the Reports Whoops sorry for the non-clarity. User logins and then fails the Posture assessment. User is not visible in the reports but the logs show the failure and placement in a quarantine role. Not locatable in the reports by filtering on User, Mac or IP. Other users are visible passed and / or failed. Seems to be "random" on who gets selected to be "excluded" from the reports. David L. Pifer - N9YNF - CCNA ISU OIT TIS Network Services 812.237.2923 From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Herron, Chris Sent: Wednesday, April 15, 2009 15:14 To: [email protected] Subject: Re: Users not appearing in the Reports David, You stated there is no report when "a user can't pass the login process". If you're using the CCA Agent and the user does not get authenticated, the CAS does not posture the endpoint and no report will be created. Is the "logon failure" due to a missing requirement or the users inability to authenticate. Please provide a little more information. CH From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of David Pifer Sent: Wednesday, April 15, 2009 02:14 PM To: [email protected] Subject: Users not appearing in the Reports We have a number of machines that are not appearing the reports section CCA. This is noticed when a user can't pass the login process and we wanted to see what patch is missing. However the user, mac address and IP are not locatable in the REPORTs. Any one else had this happen? CCA version 4.1.6 Clients are 4.1.7 windows machines. David L. Pifer - N9YNF - CCNA TIS Network Engineering Services Indiana State University, Office of Information Technology 210 N. 7th St., Rankin Hall R044, Terre Haute, IN 47809 812.237.2923 office 812.237.4361 fax Indiana State University and the Office of Information Technology would like for you to know: *** This email, and any attachments, thereto, is intended only for use by the addressee(s) named herein and may contain privileged and/or confidential information. If you are not the intended recipient of this email, you are hereby notified that any dissemination, distribution or copying of this email, and any attachments thereto, is strictly prohibited. *** A full disclosure of ISU and OIT Official Computing Policies and Procedures is available at http://www.indstate.edu/oit/official_docs/compolicy.html <http://web.indstate.edu/oit/official_docs/compolicy.html> ***
<<image001.jpg>>
