Network Access Control

Hi All,

In Client system SEP is displaying the message as

" Security Compliance scan failed"
"Your computer failed its security compliance check.  Please see the Client Management Security Log for more information."

When checked the Security logs it displays as Host Integrity failed.

I have configured Host Integrity policy to install Microsoft patch and the same patch is already installed in  the client.

We have tried even Unistalling the patch and reinstalled but problem is still pending.

Has any one faced this kind of issue.

What version of SNAC are you running? Is this happening on all clients? Whats OS's are you experiencing the issue on? Have you tried testing with a different requirement? If so, does HI work properly?

Can you post the security logs here?

Ver: SEPMR4 with SNAC
OS: XP
only some systems we are facing this issue.  In other systems it is working fine.

Can you verify that the computers that fail HI do not have the characters "&" or "%" in the Computer description and Computer name fields.

This has caused issues with clients failing HI when all requirements are met.

We have all the computer names as standards and not using any special charcters.


YES the complaince has failed, when Patch HI requirement has met.

I am not sure this applies to your situation, but take a look anyways.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007909629762298

So you say that you are running SNAC MR4? Are you running a Japanese OS on these systems?

Hi,

We are using English Operating System with SNAC MR4

Thanks for helping to get support.  


We have found the Solution:

This problem occurs because the Mup.sys driver assumes that there must be no more than three file-system filter drivers running at the same time within Windows XP and Windows 2003. The Mup.sys driver handles Distributed File System (DFS) file I/O requests. If there are four or more file system filter drivers, the I/O request packet (IRP) location buffer that is pre-allocated by Mup.sys will overflow.

For more information:
http://support.microsoft.com/kb/906866 

Solution:

We have update the Microsoft patch WindowsXP-KB906866-x86-PLK.exe and the problem is resolved.

We also did the testing by unistalling the Patch mentioned in the Host Integrity and restarted the system.

Once the system was booted it automatically installed the patch as per HI and and Host Integrity was PASSED.

thank you for the good solution