Specifications

9-67
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Configuring Agent-Based Posture Assessment
Create a Windows Update Requirement
Use the following steps to configure a Windows Update requirement.
Step 1 Go to Device Management > Clean Access > Clean Access Agent > Requirements > New
Requirement.
Figure 9-28 New Windows Update Requirement
Step 2
From the Requirement Type dropdown menu, choose Windows Update.
Step 3 Choose an Enforce Type from the dropdown menu:
• Optional (default setting)—Do not enforce requirement. The user is informed of the requirement
but can bypass it if desired (by clicking Next/Skip in the Agent dialog). The client system does not
have to meet the requirement for the user to proceed or have network access.
Note The Windows Update requirement type is set to Optional (or “do not enforce”) by default
to optimize user experience by running the update process in the background. Cisco also
recommends leaving this requirement as Optional if selecting the “Automatically download
and install” option.
• Mandatory—Enforce requirement.The user is informed of this requirement and cannot proceed or
have network access unless the client system meets it.
• Audit—Silently audit. The client system is checked “silently” for the requirement without notifying
the user, and a report is generated. The report results (pass or fail) do not affect user network access.
Refer to Configuring an Optional/Audit Requirement, page 9-94 for details.