EAD解决方案,安全策略中设置安全级别为:下线模式,进行实时监控,处理等待时间为:15分钟,并设置了检查防病毒软件,测试发现当认证检查到客户端未安装相关杀毒软件,未等待15分钟,却立即下线了,不知道什么原因导致的
(0)
这个可能得收集一下policyserver的调试级别日志看一下原因了
(0)
如何收集
链接:https://pan.baidu.com/s/1KbExx4_I0wySAmHYSLibHw 提取码:6wjm
文件上传到百度网盘了,另外下面贴了一部分,测试账号为chenfa
你好,收集的日志在帮忙看下什么原因吗?
是debug日志,你这里不是400吗?
2020-08-05 11:26:49 [INFO ] [pool-4-thread-4] [ClientAclCacheManager::queryClientAclStrategy](141099)安全策略中没有配置客户端ACL
2020-08-05 11:26:49 [INFO ] [pool-4-thread-4] [ClientAclCacheManager::queryClientAclStrategy](141099)安全策略中没有配置客户端ACL
2020-08-05 11:30:34 [INFO ] [IOReader-52] [EadMsgDecoder::decode]chenfa ; EAD认证上线请求报文(1) ; FC:AA:14:DC:EF:69 ; 0 ; 10.54.176.189 ; 报文解析成功
userName: chenfa
hwAddr: FC:AA:14:DC:EF:69
clientPort: 10102
clientVersion: CH V7.30-0548
clientDisVersion: CH iNode PC 7.3 (E0548)
isIndependent: 1
patchStamp: 0
patchFailStamp: 2NDOXkXvVt8=
SupSoftRunCheckType: true
supBlackWhiteGroup: true
supPureWhiteGroup: true
supProcessCheckMD5: true
supBWGroupWithDtl: true
iSupCmp: true
ClientType: PC
ipv6Addr:
ipAddr: 10.54.176.189
hostname: DESKTOP-6LUR598
IsDomainUser: false
BindToDomain:
LogonDomain:
DamClientId: 77F512D663F25B478F8D76F048EC03CD
iSupWanControl: false
iSupOnlineUnauthNetAudit: false
iSupACL: false
iSupURL: false
iSupRegHighOS: true
iSupAlias: true
OSInfo: Windows 10 Enterprise
CustomerizedTime: 2020-07-23 17:02:56
iSupOnlyWAV: true
iSupShareCheck: 1
iSupAntiServiceMonitor: true
diskDriveID: 3230323030373330303032343920202020202020
baseboardID: 546F2062652066696C6C6564206279204F2E452E4D2E
iSupblackssid: false
vendor: Gigabyte Technology Co., Ltd.
model: H81M-DS2
Proxy IP: 10.54.0.5
attr:ipType: 0
Address: 10.54.176.189
Port: 10102
MsgId: 31538
MsgType: 1
2020-08-05 11:30:34 [INFO ] [CmnHandler-53] [DataCacheManager::queryTermStamp] Term stamp is ACED88CC9F4CF8E4BC5F9BA3F379AB89, MAC is FC:AA:14:DC:EF:69
2020-08-05 11:30:34 [INFO ] [CmnHandler-53] [RequestProcessor::b]Termstamp is equals to server.
2020-08-05 11:30:34 [INFO ] [MsgSender-49] [EadMsgEncoder::encode]null ; EAD认证上线回应报文(2) ; VBeUGbHI ; null ; 10.54.176.189 ; 回应报文属性列表:
MsgId: 31538
MsgType: 2
attr:ipType: 0
Address: 10.54.176.189
Proxy IP: 10.54.0.5
attr:encrypt: true
attr:compressed: true
strategyMode: autoAdapt
userMessage:
antiIPchange: false
antiAgent: false
antiProxy: false
antiDualNetcard: true
ipSetMode: static
macCheck: false
sameMacCheck: false
antiMultiOS: false
antiMultiip: false
antiVMWareNATservice: false
antiVMWareUSBservice: false
iSupVMCheck: false
antiserviceCheckAction: offline
iSetWanControl: false
iSetPingOfflineMon: false
damProxyIp: 171311109
damProxyPort: 9029
heartBeatInterval: 720
heartBeatOutTimes: 3
AVMode: PluginForbidden
forcedAVs: Kingsoft
AVConfigNames: 金山毒霸
forcedAVDelayTimes: Kingsoft|0
checkList: Virus-Engine-Version;Virus-Def-Version
ifMonitorPassword: false
ifSetLocalPwdPolicy: false
LocalPwdPolicyList: MinimumPassWordAge=0;MaximumPasswordAge=30;MinimumPasswordLength=0;PasswordComplexity=0;PasswordHistorySize=0;
ifMonitorPwdforAllUser: false
ifMonitorPwdOnlydic: false
checkWeakPwdMoment: afterCheck
patchLevel: Critical,offline;Important,offline;Moderate,offline;Low,offline
checkGuestAccount: false
checkIfDepEnabled: false
USBStoreAccessControl: 0
eventSeqID: VBeUGbHI
serverVersion: iMCV700R003B05D021
2020-08-05 11:30:45 [INFO ] [pool-4-thread-5] [ClientAclCacheManager::queryClientAclStrategy](141099)安全策略中没有配置客户端ACL
2020-08-05 11:30:45 [INFO ] [pool-4-thread-5] [ClientAclCacheManager::queryClientAclStrategy](141099)安全策略中没有配置客户端ACL
2020-08-05 11:30:47 [WARN ] [com.h3c.imf.76.0.MessageDispatcher-0] [MessageDispatcher::dispatchMessage]No matching request, respOnse={Type = RESPONSE, SPID = 100, SPHdl = 0, SMdlID = 0, SSMdlID = 2242, RPID = 76, RPHdl = 1, RMdlID = 0, RSMdlID = 0, CmdID = 21687, Length = 7, SegNo = 0}
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
是debug日志,你这里不是400吗?