Cisco Cisco Clean Access 3.5

To enable Clean Access Agent Auto-Upgrade, you must:

Be running release 3.5(1) or above of the Clean Access Manager and Clean Access Server and have 
version 3.5.1 or above of the Clean Access Agent installed on clients. 

Require use of the Clean Access Agent for the role and client OS. See 

. 

Retrieve the latest version of the Agent Upgrade patch. See 

.

For mandatory or optional auto-upgrade, a newer version of the Agent patch must be downloaded to the 
CAM via Updates, or users will not be prompted to upgrade to the newer Agent.

With the 3.5(6)+ CAM/CAS, you can disable notification and distribution of the Agent Patch upgrade to 
users as follows:

Upgrade your CAM/CAS to release 3.5(6) or above.

Go to Device Management > Clean Access > Clean Access Agent > Distribution

Click the checkbox for “Do not offer current Clean Access Agent Patch to users for upgrade.” 

Click Update. 

New installs of the 3.5(3)+ CAM/CAS automatically enable mandatory Auto-Upgrade by default. For 
CAM/CAS upgrades, the current setting (enabled or disabled) will be carried over to the upgraded 
system. To disable mandatory Agent Auto-Upgrade for all users:

Go to Device Management > Clean Access > Clean Access Agent > Distribution.

Uncheck the option for “Current Clean Access Agent Patch is a mandatory upgrade.” 

Click Update. 

It is recommended to set the “Current Clean Access Agent Patch is a mandatory upgrade” option to 
ensure the latest AV product support. 

With Agent auto-upgrade (and patch distribution) enabled in the CAM, the user experience is as follows:

New users download and install the newest version of the Agent after the initial one-time web login. 

IB users with 3.5.4+ Agent installed will be prompted to auto-upgrade at login.

Out-of-Band (OOB) users with 3.5.4+ Agent installed must be on the Authentication VLAN to be 
prompted to auto-upgrade at login.