13.If you want to verify that the Security Compliance Manager posture plug-in was registered successfully with the Cisco Trust Agent, check the C:\Program Files\Common Files\PostureAgent\Plugins directory. The ibmnac6.dll and ibmnac6.inf files should be there (Figure 6-82).

Figure 6-82 Security Compliance Manager posture plug-in files

6.4 Conclusion

This concludes the installation and configuration of the basic compliance subsystem. At this point you have established and assigned the security policy to the clients. We are also providing the following information for the other teams:

￿The networking team must know the policy name to set up the policy on the Cisco ACS server.

￿The remediation team must know the names of the workflows configured in the policy.

In the next chapters we describe the processes for these two teams.

212Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Page 230
Image 230
IBM Tivoli and Cisco manual Security Compliance Manager posture plug-in files