Specifications

11-14
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 11 Monitoring and Troubleshooting Agent Sessions
Manage Certified Devices
Configure Certified Device Timer
You can configure Certified Device Timers to automatically clear the Certified Device list at specified
intervals. The Certified Devices List no longer needs to be cleared in its entirety each time the timer is
applied. Administrators can now:
• Clear the Certified Devices List per Clean Access Server, User Role, or Authentication Provider, or
a combination of all three.
• Clear certified devices without removing users from the network with the “Keep Online Users”
option. When the “Keep Online Users” option is checked, user sessions are not immediately ended
when clearing the list, but at user logout time (or at linkdown for OOB). Devices can re-enter the
list after user authentication and device remediation.
• Clear the Certified Devices List all at once or in batches (to manage user re-login and certification
during peak times). You can clear devices according to how long they have been on the list and/or
in fixed time interval batches. This facilitates CAM database management when clearing large
numbers of devices.
• Configure multiple independent timers. Administrators can create and save multiple instances of
Certified Device Timers (similar to a Scheduled Job/Task). Each Timer is independent of the others
and can be maintained separately. For example, if managing 6 CAS pairs, the administrator can
create a different Timer for each pair of HA-CASs.
Step 1 Go to Device Management > Clean Access > Certified Devices > Timer. The List page appears by
default.
Figure 11-11 Certified Devices Timer—List
Step 2
Click the New sublink to bring up the New Timer configuration form.