I'm trying to configure auto remediation for AVG Free Antivirus 2012.x Kaspersky for Windows Workstation 6.x     I already configured auto remediation for windows Firewall and Windows Auto Update setting and both of them are working correctly.   It's just Antivirus which is not working. IC detects when my client doesn't comply but can't enable the protection or start a virus scan.   One of the several things I already tried is enabling "Wired autoconfig" and "Network Access Protection Agent" services. Using command line I set: "netsh nap client enforcement ID = 79623 ADMIN = "ENABLE" Verifying the status with: "netsh nap client show state" I get "A third party antivirus program is not enabled. Windows cannot enable the antivirus product automatically. An Administrator must enable the antivirus product manually"   Any ideas? Regards Angel ... View more

Hello, I'm trying to get my Windows native clients work with SoH Checks... I already have the SoH License for the IC6500. I have created a Custom SoH Check and assigned it to a test role. The configured Authentication Protocols I have (in order) are: EAP-TTLS EAP-TLS EAP-PEAP for EAP (in order) EAP-SOH EAP-JUAC EAP-MS-CHAP-V2 In my windows 7 client machine I enabled the native supplicant and configured EAP-MS-CHAPv2 Also, enabled the EAP enforcement client as stated in: http://technet.microsoft.com/en-us/library/cc730643.aspx But it all fails when I try to establish a connection. The user authentication log shows: "Host checking is not possible with this protocol" The policy trace shows: "Host checker restriction check failed for role SSH" What am I missing? Is this supposed to work with MS-CHAPv2 or how do I enable a different authentication protocol ? I'm attaching a .docx file with several screen captures of the log and the trace policy screen Thanks for your help!! Angel ... View more

Hello,   I am working on a 802.1X authentication scenario. I have: IC6500 (4R4), Microsoft AD 2008R2, Juniper EX Switch and Windows 7 Client     I have created several users ang groups in the AD and mapped them into the IC6500. 802.1X is enabled on several ports of the EX. I also enabled Windows native 802.1X authentication service, so I am not using OAC.   The problem is: At the login screen, once I type user/password I get the following error message: "there are currently no logon servers available to service the logon request"   I have tried with several test accounts and several scenarios. Scenario 1. 802.1X disabled at the EX. account: test1 -> I can log into the domain Scenario 2. 802.1X enabled at the EX. account test2  -> I can not log into the domain Scenario 3. 802.1X enabled at the EX. account test1 (same as first scenario) -> I can log into the domain   So it looks like windows is caching the account info and using it for login. Of course it doesnÇt work if the account has not been previously used.   Any idea?   Regards ... View more

Hi everyone, I'm trying to add an AD authentication server in a IC6500 4.1R6 I'm getting: Error while joining domain CNBYV. Possible causes: - The specified administrator credentials do not properly authenticate. - The specified domain or domain controller may not be valid. Also, the device's clock must be in sync with the Active Directory server. and I now my AD account works because I just added a PC to the domain... Any ideas? Thanks ... View more

Hi everyone, I'm having an issue configuring a Pulse Access control. What I'm aiming for: An IP phone (802.1X disabled) is connected to a EX switch, MAC authenticated and assigned to VLAN 600. A PC (Odyssey client) connects to the PC port on the phone, the IC authenticates using 802.1X and assigns to vlan 400. What I have: I created a MAC Address Realm and linked to a MAC Phone role and Auth Server. IP Phone can login correctly, I also created a Local Authentication Server containing a user. I have 2 different location groups each to a different Radius Client (same IP though) a single sing-in policy for users (802.1X) and a User Realm linked to his User Role. When I plug the PC to a 802.1X enabled port, the IC tries to authenticate it trough the MAC Location Group. How can I make the IC differentiate between MAC and 802.1X authentication clients? ... View more