Question about out-of-band when deploying NAC

1. When I deploy NAC, a PC or user device is on the certified list. If User device is infected by virus, NAC Server can recognize device which is infected and prevent PC or not when I deploy out-of-band (not in-band)?
2. When I deploy out-of-band, cisco nac appliance can configure bandwidth for group users or not?
Thank you for your answer.
Duy Khang

1) Answer: No. Clean Access (NAC Appliance) will not detect when a system is infected with a virus, regardless of which deployment (In-Band or Out of Band) is used.
2) Answer: No. When deployed out of band, once the posture is completed, the client traffic no longer goes through the Clean Access server so there is no way to apply bandwidth or any other controls to it via Clean Access. In order to apply bandwidth or access restrictions via CCA, the CCA server would have to be in-band.

Similar Messages

I have a question about extracting pages. When I do the function, adobe saves the individual files as " file name space page number ", so the files look like this "filename 1.pdf", "filename 2.pdf", "filename 3.pdf". Without too many gory details, I a

I have a question about extracting pages. When I do the function, adobe saves the individual files as "<file name><space><page number>", so the files look like this "filename 1.pdf", "filename 2.pdf", "filename 3.pdf". Without too many gory details, I am using excel to concatenate some data to dynamically build a hyperlink to these extraced files. It casues me problems, however, for the space to be the the file name. Is there any way to change the default behavoir of this function to perhaps use a dash or underscore instead of a space?

No, you can't change the default naming scheme. You can do it yourself if you extract the pages using a script instead of using the built-in command.

Question about the CSS behavior when using layer 3 sticky and sticky table

Hi everyone,
I have a question about the CSS behavior when using layer 3 sticky and sticky table is full.
If I configure layer 3 sticky and specify the inactivity timeout as below, how does the CSS
handle subsequent needed sticky requests ?
advanced-balance sticky-srcip
sticky-inact-timeout 30
CSS document says that
Note:
If you use the sticky-inact-timeout command to specify the inactivity timeout
period on a sticky connection, when the sticky table becomes full and none of
the entries have expired from the sticky table, the CSS rejects subsequent
needed sticky requests.
My question is what is the next reaction by doing the CSS if the CSS is in the
following condition:
when the sticky table becomes full and none of the entries have expired from
the sticky table, the CSS rejects subsequent needed sticky requests
Does CSS just rejects/drops subsequent needed sticky requests ?
or
Does CSS does not stick subsequence requests to particular service but CSS forward
subsequence requests with round-robin basis ? which means if the sticky table is full,
the CSS just works round-robin load balancing fashion for subsequence requests ?
Your information would be appreciated.
Best regards,

Hello,
There is a good document explaining this on Cisco web site
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080094b4b.shtml
It depends if the sticky-inact-timeout is used or not. If not, it's FIFO (the oldest entry in the sticky table is removed). If yes, the CSS will reject the next sticky request.
Rgds,
Gaetan
Rgds
Gaetan

Question about SAP client setting when create new connection in CR2008

Dear All,
I have a question about SAP client setting in Crystal Report 2008 when I try to create a new connection use SAP OpenSQL(SAP Table,Cluster,or Function).
I have a SAP IDES environment with 5 clients.
While I try to create a CR standard report use SAP OpenSQL, I entered 800 into Client field in u201CUser logon credentialsu201D. The connection can be created and I can get table list. After I built a report ,I can not get data from IDES client 800, but I can get data from client 000.
I am sure client 800 has data.I checked client 800 table with Tcord se16.
I also did other tests and felt confused a lot.
Even inexistent client, such as u201C00u201Dand u201C8000u201D can be used for creating connection.
I just want to know how can I get data from client 800.
Thanks for your kindly help!
Wayne

Dear Ingo,
Thanks for your reply!
I am not sure about your suggestion clearly. What's your mean all the authorizations to use CR?
Maybe I should clarify my operations.
I logon CR2008 as administrator and created two SAP connections with different client.
There is a table named "/BEV3/CHBALLG" be showed in these connections.
I checked clients "000" and "800" both have data in the table.
I can use client 000 connection create report and get right data, but the report base on client 800 connection could not get data.
If change to another table,such as "/SAPDMC/LSOFIL", I can get data both form these connections.
I found one thing is very weird. Client "00" and "8000" do not exist in my IDES environment, but I can use them for creating connection.
May I have your further suggestions?
Wayne

Few questions about Azure MFA RD GW deployment

Hi,
I'm evaluating Azure MFA RADIUS authentication for Windows Server 2012 R2 Remote Desktop Gateway connections. I am planning on our production deployment, and before running any tests I would like to ask few questions that I couldn't find answers to.
1) Is there a risk of blocking out new RD GW connections for any amount of time during the installation process (for instance, when configuring the RD GW to use Central NPS instead of local)?
2) Is the MFA enforced to all logins when RADIUS authentication has been setup, or is there a possibility to enroll users one by one while other connection attempts are authorized without the 2nd factor authentication?
I'm running RemoteApp services with a lot of users, and want to use the MFA for a set of users only. Also, the installation should be performed quietly, without service interruptions.
CS Engineer

Hello,
As far as enforcing MFA for the user logins, YES, you have the option to enable Two-Factor Authentication only for certain users.
Here is a Guide to adding
Multi-Factor Authentication. Also, you could take a look at the
Video Tutorial.
And the
Step By Step – Using Windows Server 2012 R2 RD Gateway with Azure Multifactor Authentication should also serve helpful for the Remote Desktop Gateway Connections query.
Regards,
Neelesh.

Question about using blending modes when cloning

Hi I want to clone on a blank layer above the background layer. I have the tool set to curent and below and the blank layer is set to normal blending mode. I want the cloning to be in darken blending mode. I change the blending mode of the clone stamp tool to darken. Will that work on a blank layer that is set to normal or is it necessary to also change the blending mode for the blank layer to darken as well? Thanks for your help.

Well thanks. It's not just a portion of the image that I want to clone on using different blend modes, but the entire image. I didn't want to duplicate the background to clone on as it adds a lot in size to the image and its harder to edit out incase I make a mistake. Guess I will have to have two layers, one set to lighten and one to darken. I wish that Adobe would make photoshop work in the next version so that you could just change the blending mode of the clone stamp tool in the tool bar. Wasn't it like this in versions before CS5?
So I have another question for you. Can I use the healing brush on lighten and darken blending modes on a blank layer set to normal with sample current and below selected? Or do I have to switch between two separate layers, one set to lighten, one set to darken?
Thanks again.

Question about scratching the HD when carrying the Macbook

I know back in the day with old computers you used to have to halt the hard drive before transporting or moving it so the head doesn't scratch the platter if it's jolted. Is that still a danger with the current laptop HD's, more specifically, the MacBook? When you close the lid and it goes to sleep, does the HD halt and retract the actuator/head preventing any possible damage to the platters while in transit, or do you have to shutdown the computer for this to happen? Or is this just something that an old computer nerd doesn't need to worry about with newer HD's and laptops?

with a Mac laptop in Sleep mode the drive is the same as being in Shut Down mode. The heads are parked.
With the Mac's Sudden Motion Sensor technology the drives are fairly well protected even if they are running and you are carrying them. The SMS will sense any abrupt acceleration deviation and park the heads quickly.
I used to keep an old 'non-SMS tech' laptop on my car seat, running all day long, driving gravel roads and never had any trouble in three years time. They are more robust than you might think. However, a high G shock is not going to do any drive any good.

Question about uploading design file when converting a html file to a master file in SP2013

http://msdn.microsoft.com/en-us/library/jj822370%28v=office.15%29.aspx
Here there is a note saying "When you upload your design files, you should keep all files that are related to a single design in their own folder in the Master Page Gallery. When you copy your design folder into the mapped network drive, the Master
Page Gallery retains whatever folder structure you created."
What do they mean keeping in own folder in Master Page Gallery? All my design related files are in a single folder containing sub folders of images, css, js.. I copy this top folder to the http://ou.domain/_catalogs/masterpage/
This is also where I would copy my html file to first before converting to master file?
Thank you.

So I mapped to the server drive,
http://our.domain/_catalogs/masterpage/ successfully.
All my design related files are in a single folder containing sub folders of images, css, js.. I should copy this top folder
to thehttp://ou.domain/_catalogs/masterpage/
and also copy my html file to first before converting to master file. My question is do I copy all these files(including the html file to be converted to master) to that masterpage folder before following the instruction to go to SP site
setting and select and convert the html file? Or is there any other steps I should or shouldn't do.
Thank you.

Question about dll. error message when loading - PSE 6

I have PSE 6 and suddenly get the following error message when I open PSE: Organizer-Photoshop Element PhotoshopElementsOrganizer exe- entry point fot found. CFBundle Copy File TypeForFileData could not be located in dynamic linc library core foundation.dll.
No idea what that means, what happened and how to fix this.
Is there anybody that can give advise to a non-computer literate person????
Help would be greatly appreciated.

See post #6 in this thread for a likely solution:
http://www.elementsvillage.com/forums/showthread.php?t=50471

Question about the shared folder when backing up audio

Hello, kind Mac folk. I've read a lot about using Itunes to backup Itunes libraries onto multiple CD-R's and it seems that, right now, this is the best option for me. However, I've also read that it's a good idea to also backup the "users/shared" folder from the HD because it contains some invisible information regarding the authentication of music that I purchased using my .Mac/Itunes account. So is it possible to burn this folder in the same burning project I'll use accross the CD-R's on which my tunes will go? Or do I need to place this folder in a burn folder and back it up that way? And, if the latter is the only way possible, will it matter that the information is on a separate disc if I ever need to restore or upgrade my hardware? Thanks so much for your help and advice.
Austin

If you create your backup CD-Rs from within iTunes, it's not possible to include the Shared folder.
You have to burn that folder as a separate project.
The size of the folder can be fairly large (mine is about 1.9 GB) depending on the applications and specific use of your computer.
If your only goal is to save the authorization info in case of a HD crash or other failure, it won't help. After repair of a logic board or changing RAM, you will be asked to authorize again anyway.
Take a look at this article
The authorization info is stored in the 'SC Info.sidb' file inside the 'SC Info' folder in Shared.
You can 'unhide' invisible files by tools like Tinkertool or OnyX (you can find them on versiontracker.com)
Hope this helps.
M
17' iMac fp 800 MHz 768 MB RAM Mac OS X (10.4.6) Several ext. HD (backup and data)

Hi! Question about setting default size when opening existing PDF's.

The pdf documents i download all seem to open up at 202% size. Is there a way to set my default size (for opening and reading documents) to something smaller, so I don't have to always use the magnifying tool to shrink them? Thanks!

Under Preferences | Page Display, set Zoom to 100% or whatever you would like to open it with.

Answer to question about "Error Occurring when convertion is tried for PDF to Word Document"

There are about ten questions about the "Error Occurring" when using Abode Reader XLto convert a PDF to a Word Doc, but no one has the answer? It has something to do with "signing in the wrong address". I have been working on this three days Now! Soimeone has the answer? Cataloochee

You must be kidding to say, "Adobe doesn't convert any version of Adobe Reader."' I must be in another world! When i move an Adobe Reader file pdf that goes to a wIndow that the top line says,'' Adobe reader X1 1001 Early Dutch History. pdf ". Then i click on the far left yellow marked icon that is used to move 1001 Early Dutch History.pdf to thye far right into a gray colored slot that reads "1001 Early Dutch History.pdf'. Under the file above or down below, the selected File for conversionis, a selection gray slot that ask if you want to convert this file(pdf) to a .docx.,.doc, tex. or Excell. After I make the selection and click onto Convert, a message comes into view where the word convert was that reads "An Error Occurred wilth Signing In OK" Even the use of another pdf file with a complete different address produces the same message. There are eight chapters in Dutch that I need to convert to word document by tommorrow or the class i teach "the Origin of Golf" will have to listen in Dutch and I can't speak Dutch. Cataloochee

Question about PNP...LDB

Hi All,
I have been asked a simple but strange question about PNP LDB. When we assigned logical database in our program, it will basically create a selection screen, which have certain fields. Like Today.. Some date ranges. Person assigned number, company code, company status.
From my standpoint I know when ever we give selection to PNP screen we have to check this selection parameters in our programs, like date range ,person number, employee status etc .RIGHT?
Somebody ask me that without checking selection in our report I mean any parameters, it can filter the record, my Answer was BIG NO. You need to check all the parameters in your program.
Next question asked by me was what the purpose of PNP. I replied that rather then declaring and doing bunch of databases SAP provide logical database so current all the records and do what ever you like to do.
What you think guys?
Thanks

Here`s the question , when I am giving "1"active employee in employee status why its pulling up the information for '0' withdrawn employee?
Message was edited by: Saquib Khan

Question about using iMac 2011 as a monitor

hi ,, i have imac 2011 21'5
can i use as a monitor to play xbox 360 on it using mini displayport to hdmi cable ??
if no then is there way else i can play xbox on my imac screen

Frank:
Thanks so much for responding! One question about your post. When you say that the Mac Mini cannot boot in OS 9, does that mean that if I wanted it to hold Filemaker Pro 4 files (which runs on OS 9), that it cannot do this? We would not be running Filemaker on the Mini, just storing the files. We would run Filemaker off of our desktop computers. Sorry, I don't know a ton about computers, so sometimes I need clarification about the terms that people use.-Rob

Question about metadata filtering and document sets

Hello,
I have a question about the metadata filtering when using document sets.
When i use the metadata filter for example for "Installatie: P00001" it shows.
But i wan't to show only the document set and not all the documents. Is this possible OOTB?

Hi striker,
You can add the "Content Type" in Hierarchy Fields for your list, then click the "Document Set" to filter the document set type item, then you can input the "P00001" in Installatle key filter, click apply, then it should show only document set
items with field value P00001.
http://office.microsoft.com/en-001/sharepoint-help/set-up-metadata-navigation-for-a-list-or-library-HA102832523.aspx
Thanks
Daniel Yang
TechNet Community Support

Question about out-of-band when deploying NAC

Similar Messages

Maybe you are looking for