Specifications

9-19
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Setting Up Agent Distribution/Installation
Agent Stub file needed. or more information on the CCAAgentStub.exe file, see the Cisco NAC
Appliance - Clean Access Manager Installation and Configuration Guide, Release 4.5(1) and Release
Notes for Cisco NAC Appliance, Version 4.5(1).
• Mac Clean Access Agent Current Version—The version for the Macintosh Clean Access Agent
installation file. The upgrade version reflects what the CAM has downloaded from the Updates page.
See Require Agent Login for Client Machines, page 9-3.
• Windows Compliance Module —The current version of the AV/AS vendor support package
available to client machines. When client machines log into Cisco NAC Appliance via the Cisco
NAC Agent and check to see whether or not a new version of the Agent is available, the discovery
process also helps determine whether or not the AV/AS support information on the client is
up-to-date. If it is not, then the client may get the updated package, depending on whether or not
you have enabled the Current Compliance Module is a mandatory upgrade option and, if not,
whether the user chooses to update their AV/AS support package at that moment.
• Mac Compliance Module —The current version of the AV/AS vendor support package available to
client machines. When client machines log into Cisco NAC Appliance via the Mac OS X Agent and
check to see whether or not a new version of the Agent is available, the discovery process also helps
determine whether or not the AV/AS support information on the client is up-to-date. If it is not, then
the client may get the updated package, depending on whether or not you have enabled the Current
Compliance Module is a mandatory upgrade option and, if not, whether the user chooses to
update their AV/AS support package at that moment.
• Current NAC Agent is a mandatory upgrade—Checking this option and clicking Update forces
the user to accept the prompt to upgrade to the latest version of the Agent when attempting login. If
left unchecked (optional upgrade), the user is prompted to upgrade to the latest Agent version but
can postpone the upgrade and still log in with the existing Agent. See Disable Mandatory Agent
Auto-Upgrade on the CAM, page 9-103.
Note New CAM/CAS installs automatically set the Current NAC Agent is a mandatory upgrade
option by default under Device Management > Clean Access > Clean Access Agent >
Distribution. For CAM/CAS upgrades, the current setting (enabled or disabled) will be carried
over to the upgraded system.
The Current NAC Agent is a mandatory upgrade option only applies to Windows Agents for
release 4.1(2) and earlier.
• Do not offer current NAC Agent to users for upgrade—Checking this option and clicking Update
prevents upgrade notifications (mandatory or optional) to all Agent users, even when an Agent
update is available on the CAM.
• Current Compliance Module is a mandatory upgrade—Enabling this option forces client
machines logging in via the Cisco NAC Windows Agent to update their AV/AS vendor support
package when the current version on the client machine is not up-to-date. The user is prompted to
update the AV/AS vendor support package.
• Do not offer current Compliance Module to users for upgrade—This option gives you the ability
to withhold the most recent AV/AS vendor update package from users logging into the Cisco NAC
Appliance system via the Cisco NAC Windows Agent. (You may want to enable this feature if you
need to test the level of support for one or more vendor applications in the latest package to ensure
they are appropriate for users accessing your network before making the AV/AS support package
update available to users.)