Specifications

9-37
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Setting Up Agent Distribution/Installation
<cueslookup:name key="dp.status.noNetAccess.verbose">There is at least one mandatory
requirement failing. You are required to update your system before you can access the
network.</cueslookup:name>
<cueslookup:name key="dp.status.rejectNetPolicy.verbose">Network Usage Terms and
Conditions are rejected. You will not be allowed to access the network.</cueslookup:name>
<cueslookup:name key="dp.status.RestrictedNetAccess">Restricted Network Access
granted.</cueslookup:name>
<cueslookup:name key="dp.status.RestrictedNetAccess.verbose">You have been granted
restricted network access because your device did not conform with all the security
policies for this protected network and you have opted to defer updating your system. It
is recommended that you update your system at your earliest convenience.</cueslookup:name>
<cueslookup:name key="dp.status.temporaryNetAccess">Temporary Network
Access</cueslookup:name>
<cueslookup:name key="dp.status.temporaryNetAccess.bepatient.verbose">Please be patient
while your system is checked against the network security policy.</cueslookup:name>
<cueslookup:name key="dp.status.pra.mandatoryfailure">Performing
Re-assessment</cueslookup:name>
<cueslookup:name key="dp.status.pra.mandatoryfailure.verbose">There is at least one
mandatory requirement failing. You are required to update your system otherwise your
network access will be restricted.</cueslookup:name>
<cueslookup:name key="dp.status.pra.optionalfailure">Performing
Re-assessment</cueslookup:name>
<cueslookup:name key="dp.status.pra.optionalfailure.verbose">Only optional requirements
are failing. It is recommended that you update your system at your earliest
convenience.</cueslookup:name>
<cueslookup:name key="dp.status.SessionTimeout">Logged out</cueslookup:name>
<cueslookup:name key="dp.status.SessionTimeout.verbose">Temporary Access to the network
has expired.</cueslookup:name>
<cueslookup:name key="dp.status.Unauthenticated">Logged out</cueslookup:name>
<cueslookup:name key="dp.status.Unauthenticated.verbose"> </cueslookup:name>
Note The strings need to be replaced in every locale for which the customization is required. If customization
is required for more than one locales, then the modification has to be done in more than one
nacStrings_xx.xml file.
After modifying the required files, tar all the files and save the tarred file as “branding.tar.gz”. The
following is an example of the tar command:
tar cvzf branding.tar.gz nac_login.xml nac_logo.gif nacStrings_en.xml
Upload the tar file to the client system using the Agent Installation option in the CAM. See Installation
Page, page 9-20 for more details.
If you are using Altiris/SMS, you can distribute the customization files along with the MSI package.
Refer to Cisco NAC Agent MSI Installer, page 9-37 for more information.
When using the MSI package, distribute the individual customization files (nac_login.xml, nac_logo.gif,
and nacStrings_en.xml) and not the “branding.tar.gz” file.
Cisco NAC Agent MSI Installer
Cisco NAC Appliance provides an MSI (Microsoft Installer format) installer for the Cisco NAC Agent
(called nacagentsetup-win.msi) on Windows client machines. There is also a .zip version of the same
installer package that uses up less local memory on file transfer. You can download the MSI and/or .zip
package from the Cisco Software Download Site at http://www.cisco.com/public/sw-center/index.shtml.
Once you have obtained the Cisco NAC Agent MSI or .zip package, you can place the MSI installer in