Cisco Cisco Clean Access 3.5
11-10
Cisco Clean Access Manager Installation and Administration Guide
OL-7044-01
Chapter 11 Clean Access Agent
Distribute the Clean Access Agent
Enable Agent Auto-Upgrade on the CAM
To enable Clean Access Agent Auto-Upgrade, you must:
1.
Be running release 3.5(1) or above of the Clean Access Manager and Clean Access Server and have
version 3.5.1 or above of the Clean Access Agent installed on clients.
version 3.5.1 or above of the Clean Access Agent installed on clients.
2.
Require use of the Clean Access Agent for the role and client OS. See
.
3.
Retrieve the latest version of the Agent Upgrade patch. See
.
Note
For mandatory or optional auto-upgrade, a newer version of the Agent patch must be downloaded to the
CAM via Updates, or users will not be prompted to upgrade to the newer Agent.
CAM via Updates, or users will not be prompted to upgrade to the newer Agent.
Disable Agent Patch Upgrade Distribution to Users
With the 3.5(6)+ CAM/CAS, you can disable notification and distribution of the Agent Patch upgrade to
users as follows:
users as follows:
1.
Upgrade your CAM/CAS to release 3.5(6) or above.
2.
Go to Device Management > Clean Access > Clean Access Agent > Distribution
3.
Click the checkbox for “Do not offer current Clean Access Agent Patch to users for upgrade.”
4.
Click Update.
Disable Mandatory Auto-Upgrade on the CAM
New installs of the 3.5(3)+ CAM/CAS automatically enable mandatory Auto-Upgrade by default. For
CAM/CAS upgrades, the current setting (enabled or disabled) will be carried over to the upgraded
system. To disable mandatory Agent Auto-Upgrade for all users:
CAM/CAS upgrades, the current setting (enabled or disabled) will be carried over to the upgraded
system. To disable mandatory Agent Auto-Upgrade for all users:
5.
Go to Device Management > Clean Access > Clean Access Agent > Distribution.
6.
Uncheck the option for “Current Clean Access Agent Patch is a mandatory upgrade.”
7.
Click Update.
Note
It is recommended to set the “Current Clean Access Agent Patch is a mandatory upgrade” option to
ensure the latest AV product support.
ensure the latest AV product support.
User Experience for Auto-Upgrade
With Agent auto-upgrade (and patch distribution) enabled in the CAM, the user experience is as follows:
•
New users download and install the newest version of the Agent after the initial one-time web login.
•
IB users with 3.5.4+ Agent installed will be prompted to auto-upgrade at login.
•
Out-of-Band (OOB) users with 3.5.4+ Agent installed must be on the Authentication VLAN to be
prompted to auto-upgrade at login.
prompted to auto-upgrade at login.