Cisco Cisco NAC Appliance 4.9.3 Release Notes

Page of 96
 
14
Release Notes for Cisco NAC Appliance, Version 4.9(3)
OL-29567-01 
  New and Changed Information
Determining the Software Version
Clean Access Manager (CAM) Version
SSH or console to the machine and type: 
cat /perfigo/build
CAM web console: Administration > CCA Manager > Software Upload | Current Version
CAM web console: Monitoring > Reporting > System Summary
Clean Access Server (CAS) Version 
SSH or console to the machine and type 
cat /perfigo/build
 
CAS web console (https://<CAS_eth0_IP_address>/admin): 
Administration > Software Upload | Current Version 
CAM web console: Device Management > CCA Servers > List of Servers > Manage [CAS_IP] 
> Misc > Upgrade Logs
 | Current Version
Cisco NAC Appliance Agent Version (Windows, Mac OS X, Web Agent) 
CAM web console: Monitoring > Summary 
Agent taskbar menu: right-click About for Agent version; right-click Properties for AV/AS 
software installed and Discovery Host (used for L3 deployments). 
Cisco Clean Access Updates
CAM web console: Device Management > Clean Access > Updates > Summary 
Cisco NAC Agent Interoperability Between NAC Appliance and Identity 
Services Engine (ISE)
The Cisco NAC Agent versions 4.9.4.3 and later can be used on both Cisco NAC Appliance Releases 
4.9(3), 4.9(4) and Cisco ISE Releases 1.1.3-patch 11, 1.1.4-patch 11, 1.2. This is the recommended 
model of deploying the NAC agent in an environment where users will be roaming between ISE and NAC 
deployments.
New and Changed Information
This section describes enhancements added to the following releases of Cisco NAC Appliance for the 
Clean Access Manager and Clean Access Server.
1.
Cisco NAC Appliance platforms (FIPS or non-FIPS Cisco NAC-3315, NAC-3355, NAC-3395) support fresh installation of 
Release 4.9(3) or upgrade from Release 4.9(x) or 4.8(x) to Release 4.9(3) only. See 
 for additional details.
2.
See 
 for details on each version of the Windows/Mac OS X/Web Agent. 
3.
For checks/rules/requirements, version 4.1.1.0 and later Windows Agents can detect “N” (European) versions of the Windows 
Vista operating system, but the CAM/CAS treat “N” versions of Vista as their US counterpart. 
4.
To remain FIPS-compliant, users logging into Cisco NAC Appliance via AD SSO must run Windows Vista or Windows 7 
and have Cisco NAC Agent version 4.9.0.33 or 4.8.0.35 installed on their client machine. Windows XP clients cannot perform 
AD SSO in a FIPS 140-2 compliant network. See 
 for details.