Filter
Top Products
Appendix A. Hints and tips 463
the old one. This will indicate that the special functionality of this prototype
collector will be lost when the production version is installed.
When this collector is included in a compliance policy, it must be configured in
the same fashion as a normal policy collector with the following additional
requirements:
The Handler_Attributes parameter must include a value starting with
"NACAppliancekickUserCMD=". For example:
NACAppliancekickUserCMD="C:\Progra~1\Internet Explorer\iexplore.exe
C:\Progra~1\IBM\SCM\client\kickrich.html"
This example uses default values that will not be valid if software is installed
in non-default locations. It is used by the policy collector to start the Internet
Explorer browser and load the kickrich.html form provided with the prototype.
This in turn informs the Clean Access Manager to place the endpoint in
quarantine. If an html form other than the one performed in the example is to
be used, this parameter must be changed to use the other form.
This collector includes a “Network_Enforcement” parameter, which should
have the value “cca” added to enable the NAC Appliance integration.
TSCMAgent.bat
This script should be placed in the c:\Program Files\IBM\SCM\Client directory.
NACApplianceCompliance.entry
This file should be placed in the c:\Program Files\IBM\SCM\Client directory.
kickrich.html
This HTML form should be placed in the c:\Program Files\IBM\SCM\Client
directory and customized as described in “Integration components” on page 459.
System path
The system path should be modified to include the c:\Program
Files\IBM\SCM\Client directory.
Scheduler.bat
This script should be run once on each client system to create a task that calls
statuscheck.exe each minute to instantiate post-admission polling. It can be
edited before being run to change the frequency of post-admission compliance
checks.