Integration of the NAC Profiler - cannot add list of filters on cam

Hi all

I have a problem with the Profiler - integration of the NAC for endpoint profiling.

Here's the situation:

I have already created the integration based on the steps in the Guide: Setup Cisco NAC Appliance integration. I think that the configuration is correct, because I can do database synchronization between the Profiler and CAM. Here's the log of server profile:

NAC_SYNC: Task_Queue_Runner commissioning
NAC_SYNC: Profiler / END of synchronization of the NAC [add 0, upd 0, desc 0, rm 0]
NAC_SYNC: Profiler / START the synchronization of the NAC
INFO: [2010-12-15 11:01:09 (fcapGetHWAddr:49)] is for eth0 MAC

I have already created a profile of endpoint named "Admin" which is based on the IP address. I also created the NAC events based on endpoint profile 'Admin '.

The event of the NAC will present 'Admin' profile to a role of the NAC. This event aims to circumvent 'Admin' of the legalisation of the ANC visa so that the "Admin" can connect to the network automatically to a role of the NAC.

However, when 'Admin' to connect to the network, it still is challanged by NAC. I don't see "Admin" on the filter of the CAM or the list.

This means that the endpoint profiling is still broken.

Is there anyone who have experience with this?

Thanks for the support and comments

Imad

Advertisement

Hello

You cannot add devices manually on the profiler.

The Profiler has to detect automatically (it is the concept of profiling).

How this Profiler detects endpoints use the modules of collector.

Each module has endpoints detection means.

You will find the description of each collector module here:

http://www.cisco.com/en/US/docs/security/nac/profiler/configuration_guide/311/p_intro231.html#wp1062345.

HTH,

Tiago

--

If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

Tags: Cisco Security

Similar Questions

  • Error message "User profile Service is a not the user of the connection profile cannot be loaded" when you try to connect using the Administrator profile

    Original title: cannot use my administrator profile

    When loging on my laptop, I get this error when I click on my profile administrator "user profile Service is not the user of the connection profile cannot be loaded. This comes after the password is accepted. The only way I can connect to my computer is one of my accounts of comments. I can't change anything because I can't sign as an administrator. How can I fix? I have a Compacq laptop running Windows Vista

    Original title: cannot use my administrator profile

    When loging on my laptop, I get this error when I click on my profile administrator "user profile Service is not the user of the connection profile cannot be loaded. This comes after the password is accepted. The only way I can connect to my computer is one of my accounts of comments. I can't change anything because I can't sign as an administrator. How can I fix? I have a Compacq laptop running Windows Vista

    If you cannot connect to your admin account, no tutorials can help you because they need you to connect to an administrator account to carry out the instructions.

    See if the following can get an admin account...

    Go to Safe Mode...

    Restart your computer > immediately and repeatedly pressing the F8 key until you see a black and white screen. The top/down arrow and select Mode safe mode with networking.

    Now, while in safe mode, you perform one of the following?

    1 can connect to your account admin without the error message?
    If so, do. Then do a system restore. Choose a date when you were free to login to your account admin as your restore point.

    http://www.howtogeek.com/HOWTO/Windows-Vista/using-Windows-Vista-system-restore/

    If the system restore does not slove the problem, then use this tutorial

    http://support.Microsoft.com/kb/947215

    2. If you are unable to log in to your account administrator in safe mode, you see another administrator next to your account?
    If so, you are lucky. This is the built-in Administrator account.
    There is, by default, no password.
    It could connect and do the system restore.

    If the system restore is not enough, then perform the tutorial even as above:
    http://support.Microsoft.com/kb/947215

    If you can't do or of what precedes, I'm afraid you will have to re - install your Vista.

  • Log in problems: "service user profile Service is a not the user profile cannot loaded e to logon.

    After I typed the password Vista gives me an error screen... "The Service user profile service is a not the user profile cannot loaded e to logon.

    Any ideas? Someone has encountered this problem before?

    Please see the links to solve this question below. "The user profile Service has no logon. Unable to load the user profile.

    http://www.Vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loaded.html

    http://support.Microsoft.com/kb/947215

    If this post can help solve your problem, please click the 'Mark as answer"or if you find it useful, mark it as useful by clicking the 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • Not able to open a session in Windows 7 message service user profile service does not logon and the user profile cannot be loaded

    the user profile service service has no logon and the user profile cannot be loaded. IAM not able to switch on the laptop. How to solve this problem?
    My laptop is Sony's new Vaio. Windows7. 4 GB of ram and 2.1 billion hertz processor with dual-core

    Hi ravichandrans36,

    Thank you for using Microsoft Windows forum.

    This error can occur if the group policy setting "do not connect to users with temporary profiles" is configured.

    To resolve this issue, follow these steps:

    1 delete the profile by using the computer properties dialog box. To do this, follow these steps:

    a. Click Start, right-click computer and then click Properties.
    b. click on change settings.
    c. in the System Properties dialog box, click the Advanced tab.
    d. under user profiles, click settings.
    e. in the user profiles dialog box, select the profile you want to delete, click on remove and then click OK.
     
    2. Click Start, type regedit in the start search box and then press ENTER.

    3. Locate, and then expand the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

    4 right-click the SID that you want to delete and then click on remove.

    5 log on to the computer and create a new profile.

    For more information, see: http://support.microsoft.com/kb/947215

    EDITING REGISTRY WARNING:
    Important:   This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
    How to back up and restore the registry in Windows: http://support.microsoft.com/kb/322756

    Kind regards
    Aziz Nadeem - Microsoft Support

  • get the 1726 error: cannot add the port monitor

    get the 1726 error: cannot add the port monitor hp discovery port monitor (hp photosmart 5525 series) running Windows XP, HP Photosmart 5525

    Could not complete the installation.

    Hi Jeff,

    The computer manufacturing must have created a partition on the disk or provided you CD to restore the computer to the way it was when you bought it. If you have a PC clone, then probably you need to reformat your hard drive and reinstall the operating system. If you have an OEM computer (example: HP, Dell, ETC) there is most likely instructions when you turn on/off press F11 or F12 to return the computer to the computer.

    Note: Do nothing until you have all of your backup data.

  • Cannot access my account and I am the administrator of the system. The user profile cannot be loaded

    I can't log into my account. I am the administrator of the system account, but he said: "the service user profile Service has no log on." User profile cannot be loaded. Any suggestions? I can connect to other accounts, but they are not administrative accounts.

    ·                         Restore point:

    Do in Mode safe, if necessary.

    Try typing F8 at startup and in the list of Boot selections, select Mode safe using ARROW top to go there > and then press ENTER.

    Try a restore of the system once, to choose a Restore Point prior to your problem...

    Click Start > programs > Accessories > system tools > system restore > choose another time > next > etc.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    If the above does not work:

    http://windowshelp.Microsoft.com/Windows/en-AU/help/769495bf-035C-4764-A538-c9b05c22001e1033.mspx

    Difficulty of a corrupted user profile

    After creating the profile, you can copy the files from the existing profile. You must have at least three user accounts on the computer to perform these operations, including the new account that you created.

    See you soon.

    Mick Murphy - Microsoft partner

  • my windows vista computer keep saying the user profile cannot be loaded.and I can not connect with my password. And I need a floppy disc or usb flashdrive.please free help to change password

    I can not connect and it says failed to connect to the profile.

    Hello

    1st thing to try is the system in safe mode restore to before the problem

    http://www.windowsvistauserguide.com/system_restore.htm

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode option with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.

    If that does not solve it read more

    read the tutorial below

    http://www.Vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loaded.html

    When you log on a Windows Vista-based or a Windows 7 computer by using a temporary profile, you receive the following error message:

    The user profile Service has not logon. User profile cannot be loaded.

    http://support.Microsoft.com/kb/947215#letmefixit

    Your user profile was not loaded correctly! You have been logged on with a temporary profile.

    http://support.Microsoft.com/kb/947242

    If you tried to log on to Windows and received an error message telling you that your user profile is damaged, you can try to fix it. You will need to create a new profile and then copy the files from the existing to the new profile. You must have at least three user accounts on the computer to perform these operations, including the new account that you created.

    http://Windows.Microsoft.com/en-us/Windows-Vista/fix-a-corrupted-user-profile

  • The user's Department failed the logon__user profile cannot be loaded

    The service of the user didn't login
    User profile cannot be loaded

    ·                         Restore point:

    Try typing F8 at startup and in the list of Boot selections, select Mode safe using ARROW top to go there > and then press ENTER.

    Try a restore of the system once, to choose a Restore Point prior to your problem...

    Click Start > programs > Accessories > system tools > system restore > choose another time > next > etc.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    If the above does not work:

    http://windowshelp.Microsoft.com/Windows/en-AU/help/769495bf-035C-4764-A538-c9b05c22001e1033.mspx

    Difficulty of a corrupted user profile

    After creating the profile, you can copy the files from the existing profile. You must have at least three user accounts on the computer to perform these operations, including the new account that you created.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    http://support.Microsoft.com/kb/947242

    A temporary profile is loaded after you connect to a Windows Vista-based system

    See you soon.

    Mick Murphy - Microsoft partner

  • Support of the NAC Profiler address & ip

    Hello

    I have a layer 3 OOB NAC Profiler deployment and I am trying Profiler some IP phones from a remote location by using the statement of helper-ip address on the interface on the remote router. The problem is that the remote router acts as a dhcp server for the vlan voice and fact not forword DHCP discover for Colectionneurs of the NAC, and I can't phone ip profile. Do you know a way (an order of configuration on the router) to forword the dhcp even though the router acts as a DHCP server for this vlan?

    Thank you

    Victor

    Hi Victor,

    To do this... You must add a SVI for the voice VLAN on the switch behind the router, and then add the IP helper on the new interface VLAN voice.

    -Hassan

  • Cam of the NAC could not add the access switch

    Hi all

    My problem is I can't add the access switch to the cam using mozilla firefox or IE.here attech file cannot add the device. Any idea to solve my problem?

    Hello

    Plese note to add a device (switch) to the CAm, you must go to the leadership of OOB-> appliances-> New.

    First, you must configure the SNMP settings on the switch and the cam so that the cam and the switch can communicate.

    I advise you to make sure that carefully read the configuration for OOB guide and management switch:

    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html.

    HTH,

    Tiago

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • In the NAC MAC address filter list

    How are Faisal Hi, you? I have a question about this list of filters in the unit of the NAC. I want to do those recognized unit of the NAC mac addresses are to be get the network. However if a workstation's mac address is not in the filter list, would it not able to do the network. Is that the NAC has the ability to do? Please let me know. Thank you.

    Richard

    I'm not Faisal, but...

    You want to make additional (such as LDAP or such) or any authentication simply based on the MAC address?  If you want to only via the MAC, you can add them to the list of filters and then either set to 'allow' to allow all traffic, 'role' to put them in a specific role, or "check" to apply the evaluation of posture and then put them in the role.  If no other server authentication is configured, users who were not in the list of filters would not be able to authenticate, and they would be stuck in the authenticated VLAN.

    Thank you

    Lauren

  • THE USER PROFILE SERVICE service failed the logon__User profile cannot be loaded

    I read the previous discussions, so what I need is someone who has the patience and the time to walk through Windows 7 Home Premium for Dummies with me.  I have a friend who has updated all my software on Windows 7 and has added many other applications for a handsome sum.  A FRIEND.  I was on my labtop there is only 1 hour returned to connect and I get this message to the CONNECTION SCREEN...

    THE USER PROFILE SERVICE service has no logon.
    User profile cannot be loaded

    I'm on the front screen.  No office, NO option to use a different connection name, no Director... Just my name and my password.  My Blue tutorial button to the left and my red farm option to the right.  I can't do all the things I've read on because I can't get the properties... blah blah.  I know that I delete anything... I could not... I don't know how.  I just need help, restore peace of mind only I get from a busy daily life.

    Peuvent some please help?

    Hello

    This also happened to me in another case. All local users are unable to connect they get this error. For example if I enable comments or create a local user account that is a member of the 'users' group I get this error when you connect using the accounts of the said that has been set with a blank password. However, I was able to use my administrator account to manage my machine. You probabbly deleted your permissions on the "C:\Users" folder or the root of the drive itself. If you have a local account, you can plug this hard drive into a computer with the same OS as slave then add "everyone" group with full control and select inherit permissions from parent. Restart, and then try. I hope this helps. C =

    -Julius P.

    MCP, MCDST

  • The user profile Service and the user profile cannot be loaded

    My Windows Vista has just received an automatic update online.  Now I can login to my administrator account more.  I get two error messages) 1 the user profile Service does not logon and the user profile 2) cannot be loaded.

    I can sign in as a guest, but I don't see any of my documents and files as they are accessible only when I log in under my logon administrator... Help

    Try this:

    http://support.Microsoft.com/kb/947215

    "A programmer is just a tool that converts the caffeine in code" Deputy CLIP - http://www.winvistaside.de/

  • The service user profile Service could not connect to view the user profile cannot be loaded. I loaded Microsoft updates and can not connect on my windows7 starter system. __

    I can not connect to.  Software Microsoft gets Ths user profile Service Service has no connection user profile cannot be loaded.

    Hello

    References to Vista also apply to Windows 7.

    You can try to fix it with Safe Mode - repeatedly press F8 as you bootup. Safe Mode ADMINISTRATOR account has no password by default (unless someone has changed the password so it should be available).

    Some programs such as the Google Updater (if you added the toolbar Google, Chrome or Google Earth) has been known to cause this problem.

    Error message when you log a computer Windows Vista-based or Windows 7 by using a temporary profile: "the user profile Service has no logon. Unable to load the user profile.
    http://support.Microsoft.com/kb/947215

    Difficulty "the user profile Service has no logon. User profile cannot be loaded. "Error in Windows 7
    http://www.SevenForums.com/tutorials/186131-user-profile-service-failed-logon-user-profile-cannot-loaded.html

    How to fix error "your user profile was not loaded correctly! You have logged on with a temporary profile. "in Vista & Windows 7.
    http://www.Vistax64.com/tutorials/135858-user-profile-error-logged-temporary-profile.html

    BE VERY CAREFUL IF YOU USE THIS ONE:

    DO NOT USE THE ACCOUNT HIDDEN ON A DAILY BASIS! If it corrupts you are TOAST.

    How to enable or disable the built-in Windows 7 Administrator account
    http://www.SevenForums.com/tutorials/507-built-administrator-account-enable-disable.html

    Use the hidden administrator account to lower your user account APPLY / OK and then lift it to ADMIN. This allows clear of corruption. Do the same for other accounts if necessary after following the above message.

    You can use the hidden - administrator account to make another account as an ADMINISTRATOR with the same password (or two with the same password) to use a test or fix the other.

    You can run the Admin account hidden from the prompt by if necessary.

    How Boot for Windows 7 System Recovery Options or use a Windows 7 boot disk.
    http://www.SevenForums.com/tutorials/668-system-recovery-options.html

    What are the system recovery options in Windows 7?
    http://Windows.Microsoft.com/en-us/Windows7/what-are-the-system-recovery-options-in-Windows-7

    How to create a Windows 7 system repair disc
    http://www.SevenForums.com/tutorials/2083-system-repair-disc-create.html

    If you cannot access your old account, you can still use an Admin to migrate to another (remember to always leave an Admin who is not used except for testing and difficulty account).

    Difficulty of a corrupted user profile
    http://Windows.Microsoft.com/en-us/Windows7/fix-a-corrupted-user-profile

    I hope this helps.
    --------------------------------------------------------------------------------------------
    Rob Brown - Microsoft MVP<- profile="" -="" windows="" and="" devices="" for="" it :="" bicycle="" -="" mark="" twain="" said="" it="">

  • I lost the internet profile (ip adds, by default the mask subnet, gateway, dns & win servers) after you run the M S malicious software removal tool... Nov.2011

    V

    Worm. 4.2.5600 I had a virus and he took off and took all the internet profiles withit. Can anyone help me to restore my internet?   I don't remember the name of the virus.

    Name of the operating system Microsoft Windows XP Home Edition
    Version 5.1.2600 Service Pack 3 Build 2600
    Manufacturer of operating system Microsoft Corporation
    JAYLA system name
    System manufacturer Dell Inc.
    System model Inspiron 1010
    System Type X 86-based PC
    Processor x 86 Family 6 Model 28 Stepping 2 GenuineIntel ~ 1596 Mhz
    A11 BIOS Version/Date Dell Inc., 10/27/2009
    SMBIOS 2.5 version
    Windows C:\WINDOWS directory
    System directory C:\WINDOWS\system32
    Boot Device \Device\HarddiskVolume2
    The local United States
    Hardware Abstraction Layer Version = "5.1.2600.5574 (xpsp_sp3_gdr.080402 - 1256).
    JAYLA\jayla1 user name

    Hello

    Since you have lost the Internet profile, I suggest you contact the Internet service provider.

Maybe you are looking for