task says, we have Cisco:PA with OS-type and Cisco-Host for Hostfix , both need to be true to return healthy, if anyone
of them is not true , it should return quarantine. so in this case what should be the posture token ? ________________________________ From: Kingsley Charles <[email protected]> To: Smith Dazen <[email protected]> Cc: [email protected] Sent: Sun, April 10, 2011 8:02:49 AM Subject: Re: [OSL | CCIE_Security] When to set Cisco:Host or Cisco:PA? It depends on the task. With regards Kings On Sun, Apr 10, 2011 at 3:33 AM, Smith Dazen <[email protected]> wrote: I need the expert to confirm if it really doesn't matter to choose Cisco:Host or Cisco:PA for and condition >> > >>> Cisco:PA:OS-Type contains Windows 2000 >>> AND >>> Cisco:Host:Hotfixes=KB14478 > >otherwise is quarantine,, so what should be the posture token. > > > >reference old post :- >http://www.mail-archive.com/[email protected]/msg03883.html > > >Although the solution doesn't say > why, it makes a point of saying >specifically which one you should be selecting for the token (Cisco:PA or >Cisco:Host). The only conclusion that I can draw from this and the NAC VolI >book is that if you only assess Cisco:Host values then you need to assign a > Cisco:Host token. Whereas if you evaluate both Cisco:Host and Cisco:PA >values then it doesn't matter which one you select. > > >_______________________________________________ >For more information regarding industry leading CCIE Lab training, please >visit >www.ipexpert.com > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
