Specifications

1-17
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 1 Introduction
Client Posture Assessment Overview
Mac OS X Agent
Like the Cisco NAC Agent for windows client machines, provides local-machine Agent-based posture
assessment and remediation for Macintosh client machines.
The Mac OS X Agent provides the following support:
• Easy download and installation of the Agent on the client via initial one-time web login. The Agent
installs by default for the current user and all other users on the client machine.
• The Mac OS X Agent only performs a subset of the client posture assessment and remediation
functions available to Windows users running the Cisco NAC Agent or Cisco NAC Web Agent. For
more information, see Configuring Agent-Based Posture Assessment, page 9-39.
• Auto-upgrade. Once the Agent is installed on a client, it can automatically detect, download, and
upgrade itself to next version. The Agent checks for a new update file at every login request. The
administrator can configure Agent auto-upgrade to be mandatory or optional for all users, or can
disable update notification altogether.
• Built-in AV/AS checking support for major antivirus (AV) and antispyware (AS) vendors. AV/AS
Rule and Requirement configuration facilitates the most common type of checking administrators
need to perform on clients and allows the Agent to automatically detect and update AV and AS
definition files on the client machine. AV/AS product support is kept up-to-date on the CAM through
the use of Cisco NAC Appliance Updates, page 1-6.
Note For information on Access to Authentication VLAN change detection for an OOB client
machine, see Configure Access to Authentication VLAN Change Detection, page 3-67.
For complete details on the Agent configuration features mentioned above, see Chapter 9, “Configuring
Cisco NAC Appliance for Agent Login and Client Posture Assessment.”
For details on the features of each version of the Agent, see the latest Release Notes.
Clean Access Agent
(Persistent Agent option for Windows client machines available in releases of Cisco NAC Appliance
prior to Release 4.6(1).)
For details on the Windows version of the Clean Access Agent, refer to the Cisco NAC Appliance - Clean
Access Manager Installation and Configuration Guide, Release 4.5(1) and Release Notes for Cisco NAC
Appliance, Version 4.5(1).
Network Scanner
Note Nessus-based network scanning capabilities only apply to web login users and Clean Access Agent
users for whom a combination of client network scanning and Agent login functionality has been
configured. The Cisco NAC Agent does not support Nessus-based network scanning.