IC6500 SoH & Remediation

[angel.hernandez_]

Hello everyone, I am currently working on a proof of concept but I'm unsure whether the IC6500 can "understand" SoH from Windows machines without a client (odyssey, pulse). I am trying to recognize and re mediate computers that doesn't comply with a policy (patch version, antivirus, running programs) but don't want to install a client software. Is it possible? I've seen the SoH/NAP License for IC6500 but haven't found literature about it. (would I need a NAP server?) Regards Angel

[kalagesan_ · Accepted solution]

Hi Angel,

You can use Host Checker policies on the IC Series device with the open standard Statement of Health (SOH) protocol by leveraging the existing protocols built into the IC Series device. To use this functionality, you must obtain SOH licensing from Juniper Networks.

SOH support is implemented through local Host Checker criteria that you configure on the IC Series device, alternatively or you can  deploy an external Network Policy Server (NPS) to use third-party system health agents (SHAs) and system health validators (SHVs)

You can get more information on this from the below URL:

Using Statement of Health Integration Host Checker Policies:

http://www.juniper.net/techpubs/en_US/uac/topics/concept/uac-host-checker-statement-of-health-about....

Configuration steps:

http://www.juniper.net/techpubs/en_US/uac/topics/task/configuration/uac-host-checker-statement-of-he...

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,
Kannan

[angel.hernandez_]

Hey Kannan, Thanks for the info!!

[kalagesan_]

Hi Angel,

I am glad that I was able to resolve your query and it helped, Thanks

Regards,

Kannan