Specifications
9-24
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Setting Up Agent Distribution/Installation
• “overwrite”—the XML setting specified in the Agent configuration XML file automatically takes
precedence over any existing value currently on the client machine.
For example, a
<Locale mode=”merge”>German</Locale> entry in an Agent configuration XML file
instructs the Agent not to change any previously-existing Locale setting on the client machine (merge
instead of overwrite), but if no setting currently exists, then make the localization language German. If
the example entry reads
<Locale mode=”overwrite”>German</Locale>, then the new localized
language setting for the Agent is German, regardless of whether or not any previous setting exists.
Note The administrator can deploy a configuration XML without certain parameters and later add them when
required. The administrator can upload a new configuration XML file including the parameters. These
parameters can be set with either “merge” or “overwrite” mode, as they had never been deployed
previously.
If the mode is set to “merge”, the parameter is added if it does not exist in the configuration file present
the client machine. But, if the administrator has allowed the end user to add a parameter to the
configuration file and if the parameter value already exists, the “merge” will fail.
If the administrator wants to overwrite all the values regardless of the parameters added by the end user,
then the “overwrite” mode can be used.
For instructions on uploading the Agent configuration file to the CAM for eventual download to Agent
machines, see Installation Page, page 9-20. For more information on the Cisco NAC Agent and its
capabilities, see Cisco NAC Agent, page 10-1.
Note For information on enabling similar functions on client machines where the Clean Access Agent is
installed, refer to the Cisco NAC Appliance - Clean Access Manager Installation and Configuration
Guide, Release 4.5(1) and Release Notes for Cisco NAC Appliance, Version 4.5(1).
To ensure that the Cisco NAC Agent adopts any custom settings you specify in the Agent configuration
XML, construct the file as shown in the following XML file example template:
Example Agent Configuration XML File Template:
<?xml version="1.0" ?>
<cfg>
<VlanDetectInterval>0</VlanDetectInterval>
<RetryDetection>3</RetryDetection>
<PingArp>0</PingArp>
<PingMaxTimeout>1</PingMaxTimeout>
<DisableExit>0</DisableExit>
<AllowCRLChecks>1</AllowCRLChecks>
<SignatureCheck>0</SignatureCheck>
<RememberMe>1</RememberMe>
<AutoPopUp>1</AutoPopUp>
<AutoPopUpEnable>1</AutoPopUpEnable>
<ShowMandatoryScreen>0</ShowMandatoryScreen>
<PostureReportFilter>displayFailed</PostureReportFilter>
<BypassSummaryScreen>yes</BypassSummaryScreen>
<LogFileSize>5</LogFileSize>
<DiscoveryHost></DiscoveryHost>
<DiscoveryHostEditable>1</DiscoveryHostEditable>
<ServerNameRules>host.match.com,*.match.com,*.com</ServerNameRules>
<Locale>default</Locale>
<AccessibilityMode>0</AccessibilityMode>
<SwissTimeout>1</SwissTimeout>