IBM Tivoli and Cisco manual System path, Scheduler.bat

the old one. This will indicate that the special functionality of this prototype collector will be lost when the production version is installed.

When this collector is included in a compliance policy, it must be configured in the same fashion as a normal policy collector with the following additional requirements:

￿The Handler_Attributes parameter must include a value starting with "NACAppliancekickUserCMD=". For example:

NACAppliancekickUserCMD="C:\Progra~1\Internet Explorer\iexplore.exe C:\Progra~1\IBM\SCM\client\kickrich.html"

This example uses default values that will not be valid if software is installed in non-default locations. It is used by the policy collector to start the Internet Explorer browser and load the kickrich.html form provided with the prototype. This in turn informs the Clean Access Manager to place the endpoint in quarantine. If an html form other than the one performed in the example is to be used, this parameter must be changed to use the other form.

￿This collector includes a “Network_Enforcement” parameter, which should have the value “cca” added to enable the NAC Appliance integration.

TSCMAgent.bat

This script should be placed in the c:\Program Files\IBM\SCM\Client directory.

NACApplianceCompliance.entry

This file should be placed in the c:\Program Files\IBM\SCM\Client directory.

kickrich.html

This HTML form should be placed in the c:\Program Files\IBM\SCM\Client directory and customized as described in “Integration components” on page 459.

System path

The system path should be modified to include the c:\Program Files\IBM\SCM\Client directory.

Scheduler.bat

This script should be run once on each client system to create a task that calls statuscheck.exe each minute to instantiate post-admission polling. It can be edited before being run to change the frequency of post-admission compliance checks.

Appendix A. Hints and tips 463