So far we keep moving forward on the project. Wired and guest services policies configuration are completed. Wireless in the roadmap as there are no wireless infrastructure.

But here is the current issues with WSUS remediation. DACL permitted WSUS server and remediation is meant to be automatic but NAC agent reports can't reach WSUS.

Further troubleshooting show ISE can reach WSUS. A pointer or client will be of help..

Thanks.

Packet capture will be a way to go because the server is permitted in dacl and deny in racl. Is there any where I can get video that demonstrate wsus remediation? Any help will be helpful.