HP 3350 - Cisco NAC Appliance Spezifikationen Seite 34

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 681
  • Inhaltsverzeichnis
  • FEHLERBEHEBUNG
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 33
1-10
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 1 Introduction
Client Login Overview
Show Network Policy to
NAC Agent and Cisco
NAC Web Agent users
(Windows only)
[Network Policy Link:]
Click this checkbox if you want to display a link in the Agent login session to a Network Policy
(Acceptable Use Policy) web page to Agent users. You can use this option to provide a policies
or information page that users must accept before they access the network. This page can be
hosted on an external web server or on the Clean Access Manager itself.
To link to an externally-hosted page, type the URL in the Network Policy Link field, in the
format
https://mysite.com/helppages.
To put the network policy page on the CAM, for example “helppage.htm,” upload the page
using Administration > User Pages > File Upload, then point to the page by typing the
URL
https://<CAS_IP_address>/auth/helppage.htm in the Network Policy Link field.
Note The Network Policy page is only shown to the first user that logs in with the device. This
helps to identify the authenticating user who accepted the Network Policy Page.
Clearing the device from the Certified Devices List will force the user to accept the
Network Policy again at the next login.
For more details, see Figure 10-27 on page 10-20 and Configure Network Policy Page
(Acceptable Use Policy) for Agent Users, page 9-11.
Logoff NAC Agent users
from network on their
machine logoff or
shutdown after <x> secs
(for Windows & In-Band
setup, for OOB setup
when OOB Logoff is
enabled)
Click this option to enable logoff of the Agent from the Cisco NAC Appliance network when a
user logs off the Windows domain (Start > Shutdown > Log off current user) or shuts down a
Windows workstation. This removes the user from the Online Users list.
Note If you do not enable the Logoff NAC Agent users from network on their machine
logoff or shutdown after <x> secs option on the CAM, the last authenticated user
remains logged in even if the current user on the client logs off from the client system.
For SSO, the next user to use that client will be logged in with the credentials of the
previous user. In the case of the Cisco NAC Web Agent (which does not perform SSO),
the next user has the access level of the previous user.
Note If a user reboots his/her client machine as part of a remediation step (if the required
application installation process requires you to restart your machine, for example), and
the Logoff NAC Agent users from network on their machine logoff or shutdown
after <x> secs option has not been enabled, the client machine remains in the
Temporary role until the Session Timer expires and the user is given the opportunity to
perform login/remediation again.
Refresh Windows domain
group policy after login
(for Windows only)
Click this checkbox to automatically refresh the Windows domain group policy (perform GPO
update) after the user login (for Windows only). This feature is intended to facilitate GPO update
when Windows AD SSO is configured for Cisco NAC Agent users. See the “Enable GPO
Updates” section in the Cisco NAC Appliance - Clean Access Server Configuration Guide,
Release 4.9(x) for more details.
Automatically close login
success screen after []
secs
Click this checkbox and set the time to configure the Login success dialog to close automatically
after the user is successfully certified/logged into normal login role (otherwise user has to click
OK button). Setting the time to 0 seconds prevents display of the Agent Login success screen.
Valid range is 0-300 seconds.
Automatically close
logout success screen
after [] secs (for Windows
only)
Click this checkbox and set the time to configure the Logout success dialog to close
automatically when the user manually logs out (otherwise user has to click OK button). Setting
the time to 0 seconds prevents display of the logout success screen. Valid range is 0-300 seconds.
Table 1-1 Agent Login—General Setup Configuration Options (continued)
Control Description
Seitenansicht 33
1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 680 681

Kommentare zu diesen Handbüchern

Keine Kommentare