locked
After auto-remediation, Non-compliant not moved into compliant RRS feed

  • Question

  • Hi, I'm NamHyun Kim from KOREA.

    I 'm configuring wirless and wired NAP with SmartCard(802.1X)  

    The wireless NAP is working fine without any problems.

    But in wired, has a problem.

    Environment:

    Server is 192.168.11.X, Clients and AP is in 192.168.12.X (different subnet)

    VLAN 1: healthy, VLAN 10:unhealthy (there is no remediation servers on VLAN10. and also can't ping to 192.168.12.1 gateway. just isolation)

    Well, I just using WSHV (Firewall service) I configured non-compliant network policy like that limited access with VLAN 10 and Auto-remediation enabled

    After any other policy setting is done. I tried a test for auto-remediation.

    First, ping to Client 1 to server with -t opt.

    and I disabled firewall service from services.msc, and I can see the system center notification well. and Ping has failed to server.

    these steps work well but after the firewall service has started automatically, the non-compliant client has not moved into compliant.  

    Do I need a remedation server on VLAN10(unhealthy)? or need a nic which connected to VLAN10 with 192.168.12.x ip  

    So in the VLAN 10, After the firewall service has started and communicate each other?

    Thank you

    Thursday, August 12, 2010 8:11 AM