Specifications

Contents

Cisco NAC Appliance - Clean Access Manager Configuration Guide

OL-28003-01

Configure Restricted Network Access for Agent Users 9-10

Configure Network Policy Page (Acceptable Use Policy) for Agent Users 9-11

Configure the Agent Temporary Role 9-11

Retrieving Cisco NAC Appliance Updates 9-12

View Current Updates 9-12

Configure and Download Updates 9-15

Configure Proxy Settings for CAM Updates (Optional) 9-17

Setting Up Agent Distribution/Installation 9-18

Agent Distribution 9-19

Installation Page 9-21

Cisco NAC Agent XML Configuration File Settings 9-24

Agent Customization File Settings 9-34

Logo 9-35

Agent Login Screen 9-35

Predetermined Set of Agent Strings and Fields 9-37

Cisco NAC Agent MSI Installer 9-38

Configuring Agent-Based Posture Assessment 9-40

Overview 9-40

Configuring AV/AS Definition Update Requirements 9-42

AV Rules and AS Rules 9-44

Verify AV/AS Support Info 9-45

Create an AV Rule 9-48

Create an AV Definition Update Requirement 9-51

Create an AS Rule 9-54

Create an AS Definition Update Requirement 9-56

Configuring a Windows Server Update Services Requirement 9-58

Create Windows Server Update Service Requirement 9-60

Map Windows Server Update Service Requirement to Windows Rules 9-64

Configuring a Windows Update Requirement 9-65

Create a Windows Update Requirement 9-67

Map Windows Update Requirement to Windows Rules 9-70

Configuring Custom Checks, Rules, and Requirements 9-71

Custom Requirements 9-71

Custom Rules 9-72

Cisco Pre-Configured Rules (“pr_”) 9-72

Custom Checks 9-73

Cisco Pre-Configured Checks (“pc_”) 9-73

Using Pre-Configured Rules to Check for CSA 9-73

Copying Checks and Rules 9-73