Specifications

9-59
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Configuring Agent-Based Posture Assessment
Step 2 Map Windows Server Update Service Requirement to Windows Rules, page 9-63
Step 3 Apply Requirements to User Roles, page 9-92
Step 4 Validate Requirements, page 9-93
Create Windows Server Update Service Requirement
Use the following steps to configure a Windows Server Update Service (WSUS) requirement.
Step 1 Go to Device Management > Clean Access > Clean Access Agent > Requirements > New
Requirement.
Figure 9-26 New Windows Server Update Service Requirement
Step 2 From the Requirement Type dropdown menu, choose Windows Server Update Services.
Step 3 Choose an Enforce Type from the dropdown menu:
• Mandatory—Enforce requirement.The user is informed of this requirement and cannot proceed or
have network access unless the client system meets it.
• Optional— Do not enforce requirement. The user is informed of the requirement but can bypass it
if desired (by clicking Next/Skip in the Agent dialog). The client system does not have to meet the
requirement for the user to proceed or have network access.
• Audit—Silently audit. The client system is checked “silently” for the requirement without notifying
the user, and a report is generated. The report results (pass or fail) do not affect user network access.
Refer to Configuring an Optional/Audit Requirement, page 9-94 for details.