IC-4000 issues continued.....

[Kamran_]

Hi

Thanks for your immediate response, but i m facing few difficulties......

3)Createa New Authentication Protocol set. you can have two possible configurations here(choose any one): a) remove EAP-TTLS and EAP-PEAP from the selected protocols list and add EAP-TLS and save the auth protocol set by giving some name to it. b) remove EAP-TTLS from the selected protocols list and under PEAP section remove exisitng entries under selected protocols and add EAP-TLS only and save the auth protocol set.

Manoj where is this feature in IC-4000's web interface, i cant find anything like this..

Few more questions for you:

1. I wanna check patches for Windows, Oracle, MS Office etc.
2. Also whether IC-4000 can update Patches or Antivirus automatically..???
3. one more thing, that i wanna do to check a registry entry, if this entry is not available on a client system it should be disallowed to access network and also send mail to Administrator.
4. Domain name of client machine must be verified first before assigning IP address by DHCP.

Also tell me how can i use ISG-1000 Firewall as an enforcer with 802.1x (Computer Certificates).

Or give me suggestions what changes can be done to my scenario to achieve required goals .

Thanks / Regards,

Raja M Kamran

[ManojReddy_ · Accepted solution]

I answered it in the original thread.

> where is this feature in IC-4000's interface, i cant find anything like this..

in IC's Admin UI under: Authentication->Signing In -> Authentication Protocol Sets->New Authentication Protocols Set

>I wanna check patches, OS version, Installed applications like Oracle, MS Office etc

You can do this by creating a Host Checker policy of "Custom-Patch Assessment" type. inside the Patch Assessment HC Policy select the softwares and patches you want to check for. (refer UAC Admin guide for more details on how to do this).

>>Also whether IC-4000 can update Patches or Antivirus automatically..???

IC Can launch Live Update for updating Antivirus signatures. inside the HC policy that you are using for checking Antivirus on end-points: Enable "Download Latest Virus Definition Files" Check box.

if this is enabled, When IC checks the users PC and finds that Antivirus definitions are not latest, it will automatically launch the Live Update of AV signatures in the background(user can't see that Live Update is going on). Once, Liveupdate finishes downloading new defintions your AV program will have latest definitions.

IC currently doesn't have capability to update patches for any software in users PC. IC only supports automatic update AV definitions.

>Domain name must be verified first before assigning IP address by DHCP.

This can be done by doing HC checks of "Custom:Registry Setting" type. findout which registry key in windows stores the domain name and create a HC policy to check for that particular registry key and assign the HC policy to a role.

if you want to check for NetBIOS name of user's PC, you can create a "Custom:NetBIOS" HC Policy and check for a particular NetBIOS name.

Message Edited by ManojReddy on 09-16-2008 11:48 AM