Specifications

9-23
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Setting Up Agent Distribution/Installation
No—The Agent Login screen does not appear after the Agent is installed. The user must
double-click the Agent shortcut on the desktop to start the Agent and display it on the taskbar. The
Agent can be verified to be installed under Control Panel > Add/Remove Programs > Cisco NAC
Agent. Once the Agent is started, the Login screen will pop up if Pop Up Login Window is enabled
on the taskbar menu.
Step 7 Click Update to save settings.
Note For MSI installation instructions pertaining to the Cisco NAC Agent, see Cisco NAC Agent MSI
Installer, page 9-37.
Cisco NAC Agent XML Configuration File Settings
This section describes how to configure and enable various Cisco NAC Agent features by specifying
settings within the NACAgentCFG.xml Agent configuration file. Topics include:
• Customize Cisco NAC Agent Login/Logout Dialog Behavior
• Cisco NAC Agent Posture Assessment Report Display Setting
• Specify the Cisco NAC Agent Log File Size
• Manage the Cisco NAC Agent Discovery Host Address
• Specify Server Rule Names
• Cisco NAC Agent Verifying Launch Program Executable for Trusted Digital Signature
• Additional SWISS Discovery Customization
• HTTP Discovery Customization
• Access to Authentication VLAN Change Detection on Clients with Multiple Active NICs
• Client-Side MAC Address Management
• Enable or Disable Cisco NAC Agent Accessibility Interaction
• Specify Cisco NAC Agent Localization Settings
In order to configure a Windows client machine to use any of these additional features for the Cisco NAC
Agent, you must define the appropriate parameters in the Agent configuration XML file, ensure that you
title the file NACAgentCFG.xml, and upload the file to the CAM so that the next time a client machine
installs the Cisco NAC Agent (or if you mandate an update to the Cisco NAC Agent for existing users),
the new settings are automatically "pushed" to the Agent installation directory on the client machine.
The default install directory on Windows 8.1/8/7/Vista/XP is C:\Program Files\Cisco\Cisco NAC
Agent\. However, you may specify a different directory.
When configuring a customized Agent configuration XML file, the administrator can choose to
customize one or more (or all) settings and specify whether they should merge with or overwrite existing
XML configuration settings on the client machine. In addition to providing specific values for the
parameters defined below, the administrator can use the “mode” attribute in conjunction with the target
XML parameter to direct the Agent to “merge” the setting with existing parameters, or simply
“overwrite” existing settings.
• “merge”—specifies a value for a previously undefined XML setting and is ignored if a specific
XML setting already exists on the client machine. This is the default behavior for the XML
configuration file download feature.