beautypg.com

IBM Tivoli and Cisco User Manual

Page 184

background image

166

Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

There are six parameters regulating the behavior of the collector, which are
described in Table 6-2.

Table 6-2 Parameter information for nac.win.any.netaccounts.PostureNetAccountsV2

For the purpose of the book we require the following values to be checked:

– WARN_MIN_LEN_UNDER = 8
– FAIL_MIN_LEN_UNDER = 7
– WARN_MAX_AGE_OVER = 60
– FAIL_MAX_AGE_OVER = 90

To adjust the parameters to your need modify the operational parameters,
selecting the appropriate tabs. These parameters accept only one integer
value, so do not add multiple values and also do not change the default
names of the remediation workflows.

Parameter name

Parameter type

Description

WARN_MIN_LEN_UNDER

Operational

An integer value used to indicate
the minimum allowable password
length to avoid a warning.

FAIL_MIN_LEN_UNDER

Operational

An integer value used to indicate
the minimum allowable password
length to avoid a failure.

MIN_LEN_WF

Workflow

Name of the workflow used for
remediation if the minimum
password length is too short. This
parameter should always be set
when using the Tivoli
Configuration Manager-based
remediation solution.

WARN_MAX_AGE_OVER

Operational

An integer value used to indicate
the maximum allowable password
age, in days, to avoid a warning.

FAIL_MAX_AGE_OVER

Operational

An integer value used to indicate
the maximum allowable password
age, in days, to avoid a failure.

MAX_AGE_WF

Workflow

Name of the workflow used for
remediation if maximum password
age is too long. This parameter
should always be set when using
the Tivoli Configuration
Manager-based remediation
solution.