Specifications

9-47
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 9 Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
Configuring Agent-Based Posture Assessment
Your selection populates the following tables:
• Minimum Agent Version Required to Support AV/AS Products: shows the minimum Agent
version required to support each AV/AS product. For example:
– A 4.1.3.0 or later Windows Agent can log into a role that requires Aluria Security Center
AntiVirus 1.x, but for any earlier Agent version, this check will fail.
– A 4.6.0.3 Mac OS X Agent can log into clamXav: 0.x and ClamXav: 1.x.
Note that if a version of the Agent supports both Def Date and Def Version checks, the Def Version
check will be used.
• Latest Virus/Spyware Definition Version/Date for Selected Vendor: displays the latest version
and date information for the AV/AS product. The AV software for an up-to-date client should display
the same values.
Note The Agent sends its version information to the CAM, and the CAM always attempts to first use the virus
definition version for AV checks. If the version is not available, the CAM uses the virus definition date
instead.
Tip You can also view the latest def file version when selecting an AV vendor from the New AV Rule form.
Create an AV Rule
Note Your CAM/CAS must be running Cisco NAC Appliance release 4.5 or later and have the latest Cisco
AV/AS support updates in order to perform client remediation using version 4.5.0.0+ of the Mac OS X
Agent.
Use the following steps to configure an AV rule.
Step 1 Make sure you have the latest version of the Supported AV/AS Product List, as described in Retrieving
Cisco NAC Appliance Updates, page 9-12.
Step 2 Go to Device Management > Clean Access > Clean Access Agent > Rules > New AV Rule.