Network Access Control

 View Only

  • 1.  Access Denied

    Posted Oct 12, 2010 11:49 PM

    Hi Guys,

    I've raised this with symantec support but maybe you guys can help me also. Here is the logs that I gathered.

     

    Requirement name: "KB975558".
    --- Start checking requirement conditions ---.
     
    Rule type: Patch enforcement.
     
    Condition: Patch is installed.
    Condition was checking "WindowsXP-WindowsMedia-KB975558-x86-ENU".
    Result is fail.
     
    Processing remediation actions.
    Condition: File download complete.
    Condition was checking "\\silver\C$\Patch\WindowsXP-WindowsMedia-KB975558-x86-ENU.exe".
    Result is fail.
    Error: user postponed remediation.
    [Details: 10/12/2010 15:49:07]
     
    Requirement name: "KB975558".
    Result is fail.
     
     
    Requirement name: "KB975558".
    --- Start checking requirement conditions ---.
     
    Rule type: Patch enforcement.
     
    Condition: Patch is installed.
    Condition was checking "KB975558".
    Result is fail.
     
    Processing remediation actions.
     
    Condition: File download complete.
    Condition was checking "\\silver\C$\Patch\KB975558.exe".
    An error occurred.
    Error: access denied.
    [Details: access denied by server]
     
    Result is fail.
    [Details: 10/12/2010 17:06:12]
     
    Requirement name: "KB975558".
    Result is fail.
     
    I need to know why is this happeneing and if possible, how do I fix this.


  • 2.  RE: Access Denied

    Broadcom Employee
    Posted Oct 13, 2010 04:28 AM

    from the machine can you browse to path "\\silver\C$\Patch\KB975558.exe" ?



  • 3.  RE: Access Denied

    Posted Oct 13, 2010 09:07 AM

    Do you have access to the remediation server from your production VLAN?

    SNAC first looks for the Patch in production VLAN and if that failes switches the machine to quarantine VLAN. If the patch it not found in the Production VLAN it will automaticcly wait 5 minutes before trying to download the patch again.

    I'm not also so sure that admin shares like c$ are supported. Have you tried a normal share giving allow access to everyone just to test?

    /Torb



  • 4.  RE: Access Denied

    Posted Oct 13, 2010 08:40 PM

    Yes I can browse to the path.



  • 5.  RE: Access Denied

    Posted Oct 13, 2010 08:41 PM

    Torb,

    Yes, I've tried the normal share with permission to everyone, still the problem persists.



  • 6.  RE: Access Denied

    Posted Oct 22, 2010 06:32 AM

    Hello,

    It looks a like sharing problem or a bug maybe in Windows machine that file shared.

    I suggest that don't lose time to fix it.

    You can share it via http:// on same server,if you can configure IIS or if you couldn't that you can use http://www.ritlabs.com/en/products/tinyweb/

    to share it on http:// . Then change the path to http://server/shared/KBXXX.exe

     

    Regards,

    Oykun