Cisco Cisco NAC Appliance 4.1.6 Release Notes

This section describes the Supported AV/AS Product List that is downloaded to the Clean Access 
Manager via Device Management > Clean Access > Updates > Update to provide the latest antivirus 
(AV) and anti-spyware (AS) product integration support for Cisco NAC Appliance Agents that support 
AV/AS posture assessment/remediation. The Supported AV/AS Product List is a versioned XML file 
distributed from a centralized update server that provides the most current matrix of supported AV/AS 
vendors and product versions used to configure AV/AS Rules and AV/AS Definition Update 
requirements. 

The Supported AV/AS Product List contains information on which AV/AS products and versions are 
supported in each Windows Clean Access Agent release along with other relevant information. It is 
updated regularly to bring the relevant information up to date and to include newly added products for 
new releases. Cisco recommends keeping your list current, especially when you upload a new Agent 
Setup version or Agent Patch version to your CAM. Having the latest Supported AV/AS list ensures your 
AV/AS rule configuration pages list all the new products supported in the new Agent.

Cisco recommends keeping your Supported AV/AS Product List up-to-date on your CAM by configuring 
the Update Settings under Device Management > Clean Access > Updates > Update to 
Automatically check for updates starting from <x> every <y> hours.

The following charts list the AV and AS product/version support per client OS as of the latest Clean 
Access release: 

The charts show which AV/AS product versions support virus or spyware definition checks and 
automatic update of client virus/spyware definition files via the user clicking the Update button on the 
Clean Access Agent. 

For a summary of the product support that is added per version of the Supported AV/AS Product List or 
Clean Access Agent, see also:

You can access additional AV and AS product support information from the CAM web console under 
Device Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info.

Where possible, Cisco recommends using AV Rules mapped to AV Definition Update Requirements 
when checking antivirus software on clients, and AS Rules mapped to AS Definition Update 
Requirements when checking anti-spyware software on clients. In the case of non-supported AV or AS 
products, or if an AV/AS product/version is not available through AV Rules/AS Rules, administrators 
always have the option of creating their own custom checks, rules, and requirements for the AV/AS 
vendor (and/or using Cisco provided pc_ checks and pr_rules) through Device Management > Clean 
Access > Clean Access Agent (use New Check, New Rule, and New File/Link/Local Check 
Requirement). See the 

Guide, Release 4.1(6) 

for configuration details.

Note that Clean Access works in tandem with the installation schemes and mechanisms provided by 
supported AV/AS vendors. In the case of unforeseen changes to underlying mechanisms for AV/AS