User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 14 Network Access Profiles
Table 14-26 Posture Validation Rule for profile_name Page
Field Description
Select External
Posture Validation
Server
OL-14386-02
Related Topics
Setting Up Posture Validation Policies, page 13-16
Setting Up an External Policy Server, page 13-22
Setting a Posture-Validation Policy, page 14-30
Select External Posture Validation Audit for profile_name Page
Network Access Profiles Pages Reference
Select the external posture validation server policies that ACS will apply to the attributes received in the
request for this rule.
Failure Action Check to configure the Fail Open feature.
Failure Posture Select the credential type (AV pair) that is returned to the supplicant.
Token
Select the Posture Token for the credential type.
System Posture Use this table to configure the SPT to return to the AAA client. There are six predefined, nonconfigurable
Token
SPTs. The SPT results are listed in order from best to worst:
Configuration
System Posture Token—A Posture Agent Message and URL Redirect for each posture token.
System Posture Token—A message that will appear for each posture agent.
URL Redirect—The URL redirect that will be sent to the AAA client for each posture token.
Use this page to select an external posture validation audit server for posture validation.
To display this page, click Select Audit in the Posture Validation Page, page 14-48.
Field Description
Select Select the external posture-validation audit server or select Do Not Use Audit Server.
Fail Open Determines treatment of errors that might occur, thereby preventing the retrieval of a posture token from an
Configuration upstream NAC server. If fail open is not configured, ACS rejects the user request.
Do not reject Enables or disables fail open (default = enabled).
when Audit
failed
Use this token when unable to retrieve posture data—An appropriate token.
Timeout—The timeout value for the session.
Assign a User Group—The destination user group.
Related Topics
Setting Up an External Audit Posture Validation Server, page 13-25
Configuring Posture Validation for Agentless Hosts, page 14-33
User Guide for Cisco Secure Access Control Server 4.2
14-49