Cisco Cisco NAC Appliance 4.5 Release Notes
26
Release Notes for Cisco NAC Appliance, Version 4.5(1)
OL-16409-01
New and Changed Information
Clean Access Supported AV/AS Product Lists
The Cisco NAC Appliance Supported AV/AS Product List is a versioned XML file distributed from a
centralized update server and downloaded to the Clean Access Manager via Device Management >
Clean Access > Updates > Update. It provides the most current matrix of supported antivirus (AV) and
anti-spyware (AS) vendors and products per version of the Clean Access Agent, and is used to populate
AV/AS Rules and AV/AS Definition Update requirements for Clean Access Agents that support posture
assessment/remediation.
centralized update server and downloaded to the Clean Access Manager via Device Management >
Clean Access > Updates > Update. It provides the most current matrix of supported antivirus (AV) and
anti-spyware (AS) vendors and products per version of the Clean Access Agent, and is used to populate
AV/AS Rules and AV/AS Definition Update requirements for Clean Access Agents that support posture
assessment/remediation.
You can access AV and AS product support information from the CAM web console under Device
Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info. For convenience,
this section also provides the following summary and product charts. The charts list which product
versions support virus or spyware definition checks and automatic update of client virus/spyware
definition files via the user clicking the Update button on the Agent.
Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info. For convenience,
this section also provides the following summary and product charts. The charts list which product
versions support virus or spyware definition checks and automatic update of client virus/spyware
definition files via the user clicking the Update button on the Agent.
•
•
•
•
•
•
Note
Release 4.5 removes support for Windows 98/ME/NT for the Clean Access Agent and Clean Access
Agent Supported AV/AS Product List. See
Agent Supported AV/AS Product List. See
.
Note
Cisco recommends keeping your Supported AV/AS Product List up-to-date on your CAM (particularly
if you have updated the Windows Agent Setup/Patch version or Mac OS Agent) by configuring the
Update Settings under Device Management > Clean Access > Updates > Update to Automatically
check for updates starting from <x> every <y> hours.
if you have updated the Windows Agent Setup/Patch version or Mac OS Agent) by configuring the
Update Settings under Device Management > Clean Access > Updates > Update to Automatically
check for updates starting from <x> every <y> hours.
Note
Where possible, Cisco recommends using AV Rules mapped to AV Definition Update Requirements
when checking antivirus software on clients, and AS Rules mapped to AS Definition Update
Requirements when checking anti-spyware software on clients. In the case of non-supported AV or AS
products, or if an AV/AS product/version is not available through AV Rules/AS Rules, administrators
always have the option of creating their own custom checks, rules, and requirements for the AV/AS
vendor (and/or using Cisco provided pc_ checks and pr_rules) through Device Management > Clean
Access > Clean Access Agent (use New Check, New Rule, and New File/Link/Local Check
Requirement). See the
when checking antivirus software on clients, and AS Rules mapped to AS Definition Update
Requirements when checking anti-spyware software on clients. In the case of non-supported AV or AS
products, or if an AV/AS product/version is not available through AV Rules/AS Rules, administrators
always have the option of creating their own custom checks, rules, and requirements for the AV/AS
vendor (and/or using Cisco provided pc_ checks and pr_rules) through Device Management > Clean
Access > Clean Access Agent (use New Check, New Rule, and New File/Link/Local Check
Requirement). See the
for configuration details.
Note that Clean Access works in tandem with the installation schemes and mechanisms provided by
supported AV/AS vendors. In the case of unforeseen changes to underlying mechanisms for AV/AS
products by vendors, the Cisco NAC Appliance team will update the Supported AV/AS Product List
and/or Clean Access Agent in the timeliest manner possible in order to support the new AV/AS product
changes. In the meantime, administrators can always use the “custom” rule workaround for the AV/AS
product (such as pc_checks/pr_ rules) and configure the requirement for “Any selected rule succeeds.”
supported AV/AS vendors. In the case of unforeseen changes to underlying mechanisms for AV/AS
products by vendors, the Cisco NAC Appliance team will update the Supported AV/AS Product List
and/or Clean Access Agent in the timeliest manner possible in order to support the new AV/AS product
changes. In the meantime, administrators can always use the “custom” rule workaround for the AV/AS
product (such as pc_checks/pr_ rules) and configure the requirement for “Any selected rule succeeds.”