You should be able to write a rule like "pc_Windows-XP-SP2 || pc_Windows-XP-SP3".
Bruce From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Hennessey, Sean Sent: Friday, July 18, 2008 1:56 PM To: [email protected] Subject: Re: [CLEANACCESS] XP SP3 question again Hi again all - Let me rephrase that in a way that makes sense: I have a test role that has XP SP3 as optional with no rule about SP2. I want to have SP3 be optional but enforce them to *at least* have SP2. Is there a way to do that or do I have to set it up to just enforce the latest and greatest? Thanks! - Sean ---- Sean Hennessey Networking and Information Security Systems Administrator The University of Portland From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Hennessey, Sean Sent: Friday, July 18, 2008 10:29 AM To: [email protected] Subject: XP SP3 question again Hi all - I'm setting up the rules to support SP3 on our network and I'm managing to confuse myself. Do I remove the SP2 rule entirely? If I do and make SP3 optional (to start with) will that allow users with neither onto my network? If anyone has tips on how they deployed this, I'd appreciate the sharing of them. I know this is a rather elementary question but I spend so much time on the other side of NAC that I've managed to completely forget most of the rule parameters... - Sean ---- Sean Hennessey Networking and Information Security Systems Administrator The University of Portland
