Specifications

10-14
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 10 Cisco NAC Appliance Agents
Cisco NAC Agent
Auto-Upgrade for Already-Installed Agents: When the Cisco NAC Agent is already installed, users
are prompted to auto-upgrade at each login, unless you disable upgrade notification. You can optionally
force logout at machine shutdown (default is for users to remain logged in at machine shutdown). You
can configure auto-upgrade to be mandatory or optional. With mandatory auto-upgrade and a newer
version of the Agent available from the CAM, existing Agent users will see the an auto-upgrade prompt
at login.
If the upgrade is optional and a newer version of the is Agent available from the CAM, users can choose
to Cancel the upgrade and continue with the login process.
Clicking OK in either of the above dialogs brings up the setup wizard to upgrade the Cisco NAC Agent
to the newest version (Figure 10-8). After Agent upgrade and user login, requirement checking proceeds.
If the Compliance Module feature has been enabled, the users see a prompt to install the NAC Agent
Compliance Module. If you click OK, a setup wizard appears to upgrade the Cisco NAC Agent to the
newest version of NAC Agent Compliance Module.
15. After the user submits his or her credentials, the Cisco NAC Agent automatically checks whether
the client system meets the requirements configured for the user role (Figure 10-17).
Figure 10-17 Cisco NAC Agent Verifying System
16. If required software is determined to be missing, the Temporary Network Access dialog appears
(Figure 10-18). The user is assigned to the Agent Temporary role for the session timeout indicated
in the dialog. The Temporary role session timeout is set by default to 4 minutes and should be
configured to allow enough time for users to access web resources and download the installation
package for the required software.