NAC: Change Action Profile of System Rules

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Unfortunately i loose the point where i can change the NAC action profile of system rules.



How can i change for example - the blacklist rule action profile - here from "quarantine profile" to "reject profile" ?

i previous versions there was a gui menue at the default config profile where i can change this action profile of system rules!

Does anybody knows where this is hidden now ?

Regards
Photo of M.Nees

M.Nees, Embassador

  • 9,568 Points 5k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 49,972 Points 20k badge 2x thumb
Hey Matthias,

do you mean to change it from this....


to this...


Then just click on "quarantine NAC Profile" and set the checkmark on reject...



-Ron
Photo of M.Nees

M.Nees, Embassador

  • 9,568 Points 5k badge 2x thumb
Hi Ronald,

i want to change the complete profile not only the RADIUS Attribute action.

Any idea ?
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 49,972 Points 20k badge 2x thumb
If I unterstand it correctly that is just a name so just rename it.

?? could be that you can't choose another profile because blacklist is a default/internal rule ??

Photo of M.Nees

M.Nees, Embassador

  • 9,568 Points 5k badge 2x thumb
Hi Ronald,

since yesterday i learned that this particular systeme Rule (Blacklist rule) cannot be modified!
I cannot change the assigned NAC Profile (but this was what i want to do).

But I get another config button that helps me achieving my goal:
"advances rule order"
Activate this - then i am able to set a customer rule before Blacklist (system rule). This custom rule contains the default blacklist MAC object. That helps me.

Just regarding my beginning question - i am looking for this menue option ( ~ netsight 4.2):



Anybody an idea were this is now hidden ?
 
Photo of James A

James A, Embassador

  • 7,338 Points 5k badge 2x thumb
That's now in the feature section of the configuration. So in full, Tools menu/Management and Configuration/NAC Configurations/Features/Click on the feature heading:

Ever since the introduction of Advanced Location-Based Access portals, modifying these defaults has only been possible through the new NAC Configurations dialog, not the old Advanced Configuration dialog. Although I do prefer the latter for most normal config, you should avoid it for portal config due to this split.
Photo of Bharathiraja, Suresh

Bharathiraja, Suresh, Employee

  • 3,536 Points 3k badge 2x thumb
Hi Matthias,

Please let us know if you still have any questions,

Thanks,
Suresh.B
Photo of M.Nees

M.Nees, Embassador

  • 9,568 Points 5k badge 2x thumb
Hi James,

thanks for digging out this hidden menu for setting guest access rules ...

All my questions are clarified!


Regards