Specifications

9-6
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Require Agent Login for Client Machines
Figure 9-3 Cisco NAC Web Agent Launch Page
Configure Out-of-Band Logoff
Caution To avoid disconnecting users currently logged into the Cisco NAC Appliance network, Cisco strongly
recommends disabling the Out-of-Band Heartbeat Timer during a planned network outage, as changing
this setting could kick all current users from the Out-of-Band Online Users list.
The Out-of-Band logoff feature is disabled in Cisco NAC Appliance by default and is not applicable for
the Cisco NAC Web Agent or web login user sessions.
Feature Benefits
• Out-of-Band Logoff can be used to monitor and to track users in OOB user list.
• This feature allows the Agent on the client machines to initiate the log-off process in an Out-of-Band
deployment.
• Out-of-Band Logout is available in the agent tray icon and is useful for the shared environments
when one user needs to logout of CAM for another user to be logged into CAM to gain access to a
different network.
• Out-of-Band Logoff is useful when users are connected behind an IP Phone. When the users
disconnect, the managed switch will not send a linkdown trap to the CAM prompting to remove the
user from the Out-of-Band Online Users list. You can enable OOB Heartbeat timer, so that after the
timer expires, users who are no longer on the network are removed.
Feature Dependencies - Mandatory
• For Out-of-Band Logoff to function, both the CAM/CAS should be installed with Release 4.8 or
later and the client machine should be running the corresponding Cisco NAC Agent version, that is
4.8.0.32 or later.