I need the expert to confirm if it really doesn't matter to choose Cisco:Host
or Cisco:PA for and condition >>
>> Cisco:PA:OS-Type contains Windows 2000
>> AND
>> Cisco:Host:Hotfixes=KB14478
otherwise is quarantine,, so what should be the posture token.
reference old post :-
http://www.mail-archive.com/[email protected]/msg03883.html
Although the solution doesn't say why, it makes a point of saying
specifically which one you should be selecting for the token (Cisco:PA or
Cisco:Host). The only conclusion that I can draw from this and the NAC VolI
book is that if you only assess Cisco:Host values then you need to assign a
Cisco:Host token. Whereas if you evaluate both Cisco:Host and Cisco:PA
values then it doesn't matter which one you select.
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com