We can use Cisco:PA or Cisco-Host or HIP. What difference does it make when selecting specific posture token.? Not sure, if I am missing something here.
With regards Kings On Sun, Apr 10, 2011 at 2:16 PM, Smith Dazen <[email protected]> wrote: > task says, we have Cisco:PA with OS-type and Cisco-Host for Hostfix , both > need to be true to return healthy, if anyone > of them is not true , it should return quarantine. > > so in this case what should be the posture token ? > > ------------------------------ > *From:* Kingsley Charles <[email protected]> > *To:* Smith Dazen <[email protected]> > *Cc:* [email protected] > *Sent:* Sun, April 10, 2011 8:02:49 AM > *Subject:* Re: [OSL | CCIE_Security] When to set Cisco:Host or Cisco:PA? > > It depends on the task. > > With regards > Kings > > On Sun, Apr 10, 2011 at 3:33 AM, Smith Dazen <[email protected]> wrote: > >> I need the expert to confirm if it really doesn't matter to choose >> Cisco:Host or Cisco:PA for and condition >> >> >> >> Cisco:PA:OS-Type contains Windows 2000 >> >> AND >> >> Cisco:Host:Hotfixes=KB14478 >> >> otherwise is quarantine,, so what should be the posture token. >> >> >> reference old post :- >> >> http://www.mail-archive.com/[email protected]/msg03883.html >> >> Although the solution doesn't say >> why, it makes a point of saying >> specifically which one you should be selecting for the token (Cisco:PA or >> Cisco:Host). The only conclusion that I can draw from this and the NAC VolI >> book is that if you only assess Cisco:Host values then you need to assign a >> >> Cisco:Host token. Whereas if you evaluate both Cisco:Host and Cisco:PA >> values then it doesn't matter which one you select. >> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
