Cisco Cisco Clean Access 3.5

If a certified device is moved from one CAS to another, it must go through Clean Access certification 
again for the new CAS unless it has been manually added as an exempt device at the global level for all 
Clean Access Servers. This allows for the case where one Clean Access Server has more restrictive Clean 
Access requirements than another. 

Though devices can only be certified and added to the list per Clean Access Server, you can remove 
certified devices globally from all Clean Access Servers or locally from a particular CAS only (see the 
Cisco Clean Access Server Installation and Administration Guide for additional details.) 

See also 

 for additional information. 

Designating a device as exempt is the way a device can be manually added to the 
automatically-generated Certified List. The Clean Access Server only adds a device to the Certified List 
if the device has met the Clean Access criteria you configured. A device designated as Exempt is 
considered clean and therefore exempt from having to go through certification while its MAC address 
remains on the Certified List. Adding an exempt device in effect bypasses the Clean Access Server’s 
automated process of Clean Access certification. 

Go to Device Management > Clean Access > Certified Devices > Add Exempt Device

.

Type the MAC address in the Exempt Device MAC Address field. To add several addresses at once, 
use line breaks to separate the addresses.

Click Add Exempt.

The Certified List page appears, highlighting the exempt devices (

Exempt devices added with these forms are exempt for all Clean Access Servers. To designate an exempt 
device for only a particular Clean Access Server, see the Cisco Clean Access Server Installation and 
Administration Guide.