Hey Wendy,

In Vista, I don't think we check browsers, whereas in XP we do and that 
is why it is failing. I don't know why the rules are setup like that, 
might be some critical OS patches on XP that made it like that. So the 
client is failing because they don't have IE6 or IE7.

I understand where you are coming from, however I think gmail and IE8 
are two different situations - Gmail will always be in beta - IE8 is a 
beta release designed for bug testing for the full release which has a 
set date.

That being said, the Clean Access product team has never wavered in the 
fact that they will not support betas or release candidates. This 
happened with IE7 and it happened with XP SP2 and SP3 and Vista SP1. Its 
always fun when those betas and RCs come out, but as with before there 
will not be a check released for IE8 beta.

You can certainly create a copy of the rule and create a custom IE8 
check to add into it, many customers have done that in the past.

An even better option IMHO is to use the WSUS style requirement instead 
of the Windows Update style. That way instead of checking against 
Cisco's rule set, the client will check against Microsoft's 
WindowsUpdate.com and if it says its up to date it will return an OK to 
the agent allowing the user to login.

Nate

SHIH, WENDY wrote:
> Hi Nate,
> Here is the log.  Maybe I should say there is no checks for IE8 but it stops XP users but allow Vista users to use it.  Below is the log from a XP with IE 8 and the error message is something like "you are missing a Windows update".  I understand why we don't want to support beta software but even Google mail is still in beta but we can't tell people not to use gmail.  Many universities support it officially.  Thanks.
>
> # Install Critical Windows Updates (Mandatory)
>
>     * Passed Checks:
>       pc_KB954593_MS08-052_XP
>       pc_Windows-XP-SP2
>       pc_KB950749_MS08-028_XP_SP2
>       pc_KB952954_MS08-046_XP_SP2
>     * Failed Checks:
>       pc_IE7_0, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Version starts with 7.0]
>       pc_Windows-XP-SP3, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion contains Service Pack 3]
>       pc_Windows-XP-SP3-int, Registry Check [\HKEY_LOCAL_MACHINE\system\CurrentControlSet\control\windows\CSDVersion equals 768]
>       pc_IE6_0, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Version starts with 6.0]
>     * Not executed Checks:
>       pc_KB923789_MS06-069_XP_SP2
>       pc_Flash_6r79_Registered_LC
>       pc_KB938127_MS07-050_XP_SP2_IE7
>       pc_Flash_6r79_Registered_UC
>       pc_KB951698_MS08-033_XP
>       pc_KB953838_MS08-045_XP_SP3_IE7
>       pc_KB953838_MS08-045_XP_SP3_IE6
>       pc_Flash_6_0_79
>       pc_KB952954_MS08-046_XP_SP3
>       pc_KB953838_MS08-045_XP_SP2_IE7
>       pc_KB953838_MS08-045_XP_SP2_IE6
>       pc_Windows-XP-SP2-int
>     * Description:
>
> -----Original Message-----
> From: Cisco Clean Access Users and Administrators [mailto:[log in to unmask]] On Behalf Of Nathaniel Austin
> Sent: Thursday, September 18, 2008 1:55 PM
> To: [log in to unmask]
> Subject: Re: XP IE 8 beta failed cisco check but Vista IE 8 passed it
>
> Hi Wendy,
>
> AFAIK there is no check for IE8 Beta in Vista either. What check are you
> seeing that covered under?
>
> Nate
>
> SHIH, WENDY wrote:
>   
>> Hi,
>>
>> I am not sure why Cisco Vista check allows IE 8 beta but failed the IE
>> 8 in XP.   Do any of you experience this issue?
>>
>>
>>
>> Do you allow IE8 beta or tell users to uninstall?
>>
>>
>>
>>  If you allow it, are you just modifying  the Cisco rule pr_xp_Hotfixes?
>>
>>
>>
>> Thank you.
>>
>>
>>
>> Wendy
>>
>>