Problem:

• Incomplete rule assignment information displayed by the NAM Administration Tool

Fact:

• Network Access Manager
• Network Director v2.0
• EMS
• Network Access Manager 1.2
• 3C15510
• NAM
• Current Rule
• Rule mismatch

Cause: If a network administrator who uses the NAM Administrator tool does not been have read permission on all NAM Rules then the rule displayed in the Current Rule Column for the Users and Computers View of the Administrator User Interface may not be the actual rule applied by the NAM Authorization plug-in when an access request is received by the IAS server.

This will also impact the list of rules shown on the Network Access tab (accessible by right-clicking Users or Groups or Computers in the Tree pane and selecting Properties). The network administrator will not be shown the full list of rules and consequently will find it difficult to determine which of the applied rules has the highest priority.

Problem: This can make the task of identifying network access problems very difficult and also have repercussions on network security if, for example, the displayed rule denied network access but the actual rule allowed network access.

Fix: Ensure all network administrators have Read permission on all rules created. Refer to the User Guide for further information

— David Gonzalez 2021/04/15 10:54