User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 13 Posture Validation
Table 13-13 External Posture Validation Audit Server Setup Options (continued)
Option Description
Assign This Group if Audit Server Did
not Return a Device Type
OL-14386-02
Posture Validation Pages Reference
Enables assignment of a device to any administrator-defined group when the audit
server does not return a device type.
User Group Lists all user groups, including Any. The device type that MAC authentication
returns is initially compared with this list of device types.
Device Type Defines the comparison criteria for the User Group, using an operator and device
type.
Valid values for the operator are:
match-all
=
!=
contains
starts-with
regular-expression
Valid values for the device type drop-down are not editable. They include:
Printer
IP Phone
Network Infrastructure
Wireless Access Point
Windows
Unix
Mac
Integrated Device
PDA
Unknown
Type a device type in the text box if the device type drop-down does not contain a
particular device.
Assign User Group A drop-down list of administrator-defined user groups. If the comparison of the
initial User Group with the Device Type succeeds, ACS will assign this user group.
Add, Delete, Up, Down Controls that affect the user groups.
Submit, Delete, Cancel Controls that affect the whole policy.
An audit policy can be in use with more than one NAC Network Access Profile.
Before deleting a policy, you must identify the NAC Network Access Profiles that
the deletion will affect.
User Guide for Cisco Secure Access Control Server 4.2
13-39