Specifications

10-27
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 10 Cisco NAC Appliance Agents
Cisco NAC Web Agent
You can find complete Operating System Compatibility and Browser Support information for all Cisco
NAC Appliance Agents in the Support Information for Cisco NAC Appliance Agents, Release 4.5 and
Later.
In Windows 8, Web Agent does not support Metro Mode and Toast Notification.
ActiveX and Java Applet Requirements
• If you plan to use the Java applet version to install the Web Agent files, the client must already have
Java version 1.5 or higher installed.
• If you plan to install the Web Agent files via ActiveX, the client machine must be using 32-bit
version of Microsoft Internet Explorer. You cannot install via ActiveX on a Firefox web browser or
on a 64-bit verison of Internet Explorer.
• The user must have permissions for ActiveX download or admin privileges on the client machine to
enable installation of ActiveX controls.
Note The Web Agent Java applet might fail to launch when the CPU load on the client machine approaches
100%. (ActiveX runs successfully under these conditions.)
Note Security restrictions for the “Guest” user profile in Windows Vista operating systems prevent ActiveX
controls and Java applets from running properly. Therefore, you must be logged into the Windows Vista
client machine as a known user (not a “Guest”) in order to log into Cisco NAC Appliance via the Web
Agent.
Microsoft Internet Explorer 7 in Windows Vista
By default, Windows Vista checks the server certificate revocation list and prevents the Web Agent from
launching on the client machine. To disable this functionality:
Step 1 In Internet Explorer 7, navigate to Menu > Tools > Internet Options.
Step 2 Click the Advanced tab.
Step 3 Under Security, uncheck (disable) the Check for server certificate revocation option.
Step 4 Click OK.
Configuration Steps for the Cisco NAC Web Agent
The basic steps needed to configure the Cisco NAC Appliance system to enable and use the Cisco NAC
Web Agent are as follows:
1. Make sure to follow the steps in Agent Configuration Steps, page 9-3 to enable and specify installer
download parameters for the Cisco NAC Web Agent.
2. (Optional) Set up a “Restricted Access” role as described in Adding a New User Role, page 6-7.
3. Configure Agent requirements using the instructions in Configuring Agent-Based Posture
Assessment, page 9-39:
a. Configuring AV/AS Definition Update Requirements, page 9-41