Cisco Cisco NAC Appliance 4.1.0
12-10
Cisco NAC Appliance - Clean Access Manager Installation and Administration Guide
OL-12214-01
Chapter 12 Configuring Clean Access Agent Requirements
Create Clean Access Agent Requirements
The steps to create AS Definition Update Requirements are as follows:
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Note
Note that in some cases it may be advantageous to configure AV or AS rules/requirements in different
ways. For example:
ways. For example:
•
Not all product versions of a particular vendor may support the Agent launching the automatic
update of the product. In this case, you can provide instructions (via the Description field of the AV
or AS Definition Update requirement) to have users update their AV or AS definition files from the
interface of their installed AV or AS product.
update of the product. In this case, you can provide instructions (via the Description field of the AV
or AS Definition Update requirement) to have users update their AV or AS definition files from the
interface of their installed AV or AS product.
•
You can associate the AV or AS rules with a different requirement type, such as Link Distribution
or Local Check, to change the Agent buttons and user action required from “Update” to “Go to
Link”, or to disable the action button and provide instructions only. This allows you flexibility in
configuring the actions you want your users to take.
or Local Check, to change the Agent buttons and user action required from “Update” to “Go to
Link”, or to disable the action button and provide instructions only. This allows you flexibility in
configuring the actions you want your users to take.
•
You can also configure “optional” requirements. These will generate reports for clients and
optionally provide users extra time to meet a requirement without blocking them from the network.
See
optionally provide users extra time to meet a requirement without blocking them from the network.
See
for details.
Verify AV/AS Support Info
Cisco NAC Appliance allows multiple versions of the Clean Access Agent to be used on the network.
New updates to the Agent will add support for the latest antivirus or antispyware products as they are
released. The system picks the best method (either Def Date or Def Version) to execute AV/AS definition
checks based on the AV/AS products available and the version of the Agent. The AV/AS Support Info
page provides details on Agent compatibility with the latest Supported AV/AS Product List downloaded
to the CAM. This page lists the latest version and date of definition files for each AV and AS product as
well the baseline version of the Agent needed for product support. You can compare the client’s AV or
AS information against the AV/AS Support Info page to verify if a client’s definition file is the latest.
If running multiple versions of the Agent on your network, this page can help troubleshoot which version
must be run to support a particular product.
New updates to the Agent will add support for the latest antivirus or antispyware products as they are
released. The system picks the best method (either Def Date or Def Version) to execute AV/AS definition
checks based on the AV/AS products available and the version of the Agent. The AV/AS Support Info
page provides details on Agent compatibility with the latest Supported AV/AS Product List downloaded
to the CAM. This page lists the latest version and date of definition files for each AV and AS product as
well the baseline version of the Agent needed for product support. You can compare the client’s AV or
AS information against the AV/AS Support Info page to verify if a client’s definition file is the latest.
If running multiple versions of the Agent on your network, this page can help troubleshoot which version
must be run to support a particular product.
To View Agent Support Details:
1.
Go to Device Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info
2.
Choose either Antivirus (
) or Anti-Spyware (
) from the Category
dropdown.