Cisco Cisco NAC Appliance 4.9 Release Notes

The Cisco NAC Appliance Supported AV/AS Product List is a versioned XML file distributed from a 
centralized update server and downloaded to the Clean Access Manager via Device Management > 
Clean Access > Updates > Update. It provides the most current matrix of supported antivirus (AV) and 
anti-spyware (AS) vendors and products per version of the Agent, and is used to populate AV/AS Rules 
and AV/AS Definition Update requirements for Agents that support posture assessment/remediation.

You can access AV and AS product support information from the CAM web console under Device 
Management > Clean Access > Clean Access Agent > Rules > AV/AS Support Info. For convenience, 
this section also provides the following summary and product charts. The charts list which product 
versions support virus or spyware definition checks and automatic update of client virus/spyware 
definition files via the user clicking the Update button on the Agent.

In some cases, the specific AV/AS vendor software requires the user to have administrator privileges on 
the client machine to enable updates.

For Windows 7/Vista/XP AV/AS support information on the Cisco NAC Agent (version 4.9.0.33) and 
Cisco NAC Web Agent (version 4.9.0.20), see the

 document optimized for UTF-8 character display.

For Mac OS X AV/AS support information on the Cisco Mac OS X Agent (version 4.9.0.649), see the 

 document optimized for UTF-8 

character display. 

Cisco recommends keeping your Supported AV/AS Product List up-to-date on your CAM (particularly 
if you have updated the Windows Agent Setup/Patch version or Mac OS Agent) by configuring the 
Update Settings under Device Management > Clean Access > Updates > Update to Automatically 
check for updates starting from <x> every <y> hours. 

Where possible, Cisco recommends using AV Rules mapped to AV Definition Update Requirements 
when checking antivirus software on clients, and AS Rules mapped to AS Definition Update 
Requirements when checking anti-spyware software on clients. In the case of non-supported AV or AS 
products, or if an AV/AS product/version is not available through AV Rules/AS Rules, administrators 
always have the option of creating their own custom checks, rules, and requirements for the AV/AS 
vendor (and/or using Cisco provided pc_ checks and pr_rules) through Device Management > Clean 
Access > Clean Access Agent (use New Check, New Rule, and New File/Link/Local Check 
Requirement). See the 

Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.9 

for configuration details.




Note that Clean Access works in tandem with the installation schemes and mechanisms provided by 
supported AV/AS vendors. In the case of unforeseen changes to underlying mechanisms for AV/AS 
products by vendors, the Cisco NAC Appliance team will update the Supported AV/AS Product List 
and/or Agent in the timeliest manner possible in order to support the new AV/AS product changes. In 
the meantime, administrators can always use the “custom” rule workaround for the AV/AS product (such 
as pc_checks/pr_ rules) and configure the requirement for “Any selected rule succeeds.”