O'Reilly logo

CCNP Security SISAS 300-208 Official Cert Guide by Kevin Redmon, Aaron Woland

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Verifying Posture and Redirect

To verify that the posturing rules you have configured are correct and that you are hitting the correct policy, you can first try to browse the Internet from a Mac OS X endpoint that does not have a NAC agent installed. By not having the NAC agent installed, your endpoint will likely have the attribute of Session:PostureStatus EQUALS Unknown. Because the CPP authorization rule is at the top of the authorization policy and has this unknown as its sole condition, you should receive the authorization profile of CPP. This CPP profile should, upon an attempt to browse to a website, redirect you to the CPP portal whereby a NAC agent will be pushed down to your endpoint (see Figure 19-19). This is indeed what happened ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required