Specifications

11-12
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 11 Monitoring and Troubleshooting Agent Sessions
Manage Certified Devices
Though devices can only be certified and added to the list per Clean Access Server, you can remove
certified devices globally from all Clean Access Servers or locally from a particular CAS only (see the
Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.9(x) for additional details.)
For additional information, see also Out-of-Band Users, page 3-68.
Add Exempt Device
Designating a device as Exempt excludes the device from Network Scanning (Nessus scans) and no
network scanning report is generated for the client. Exempting a device manually adds it the to Certified
Devices List and allows it to bypass network scanning as long as its MAC address remains on the list.
Note Adding a device as Exempt does not exempt the client machine from Agent posture assessment.
Note For details on how to allow users/devices to bypass authentication, see Global Device and Subnet
Filtering, page 2-10.
To add an exempt device:
Step 1 Go to Device Management > Clean Access > Certified Devices > Add Exempt Device.
Figure 11-9 Add Exempt Device
.
Step 2 Type the MAC address in the Exempt Device MAC Address field. To add several addresses at once, use
line breaks to separate the addresses.
Step 3 Click Add Exempt.
Step 4 The Certified Devices List page appears, highlighting the exempt devices (Figure 11-10).
Note Exempt devices added with these forms are exempt for all Clean Access Servers. To designate an exempt
device for only a particular Clean Access Server, see the Cisco NAC Appliance - Clean Access Server
Configuration Guide, Release 4.9(x).