Security

I have implemneted wired 802.1x with cisco switchs and ongaurd agnet installed on all win 7 an win Xp clients the thing is that I want to do auto remediation for user so antivurus can instaled automatically how can I do that?

In your posture policy, enable auto-remediation in the Antivirus configuration.


Thanks,
Tim

Make sure you check whats auto remediation action are supported based on the product you are using:

https://<ClearPass IP>/agent/supportcharts/Win_AV_ProductConfig.xml

So what exaclty does it do is it installl antivirus without client interaction?

Auto-remediation only works if the client already has antivirus installed.
It can turn it on, update it, etc but make sure you look at Vic's post for
supported software.

Actually alll we thought about is it will install the antivirus so ,now I need to reddirect useres who dont have antivirus to a FTP server to doenload it and show them a message with that so what is the steps to configure this and thanks in advance

You can do something along the lines of checking for the antivirus status in your enforcement policy and if unhealthy, return a role to the controller that has a captive portal attached with the page to install it.

 

so what I got is that I have to cretae enforcement profile with redirction to the FTP server for example?

 

so what is the right syntax for the rulles in the Enforcment profile?