Specifications

9-14
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Retrieving Cisco NAC Appliance Updates
Cisco NAC Web Agent Facilitator (ActiveX/Applet)
Displays the current version of the Cisco NAC Web Agent ActiveX/Java Applet the CAM uses to install
the temporal Agent on the client machine when users access Cisco NAC Appliance and choose to use
the Cisco NAC Web Agent.
L3 MAC Address Detection (ActiveX/Applet
The L3 Java Applet and L3 ActiveX web client are needed for client MAC Address detection when users
perform web login in L3 OOB deployments. The MAC detection mechanism of the Agent will
automatically acquire the client MAC address in L3 OOB deployments. (See the Cisco NAC Appliance
- Clean Access Server Configuration Guide, Release 4.9(x) for more information.)
Users performing web login will download and execute either an ActiveX control (for IE browsers) or
Java applet (for non-IE browsers) to the client machine prior to user login to determine the user
machine’s MAC address. This information is then reported to the CAS and the CAM to provide the IP
address/ MAC address mapping.
ActiveX/Java Applet and Browser Compatibility
• Complete ActiveX/Java Applet and Browser Compatibility information is available in Support
Information for Cisco NAC Appliance Agents, Release 4.5 and Later.
• Due to Firefox issues with Java, Java applets are not supported for Firefox on Mac OS X. See the
Firefox release notes (http://www.mozilla.com/firefox/releases/1.5.0.3.html) for details.
Note • To ensure Clean Access checks include the latest Microsoft Windows hotfixes, always get the latest
Updates of Cisco Checks and Rules (by Clean Update if needed) and ensure appropriate host-based
traffic policies are in place (see Add Global Host-Based Traffic Policies, page 8-8 for details.)
• When upgrading your CAM/CAS to the latest release of Cisco NAC Appliance, all Perfigo/Cisco
pre-configured checks/ rules will be automatically updated.
Step 3 Once updates are performed (manual or automatic), you can check the Summary page to verify the
updates.
Configure and Download Updates
Step 1 Go to Device Management > Clean Access > Updates.
Step 2 Click the Update subtab to configure what Cisco Updates to download to your CAM and/or how often
to check for Clean Access Updates. (Figure 9-5).