Question of NAC clean access agent (CCA)

Hello

IAM through OOB NAC deployment and I have a question about the agent of the CCA that is persistent on the client computers, if a customer leaves his work with the laptop that has the agent of the CCA and will use it in the House or any other network, will be the effect of the agent on the laptop access in any other network or not? and why?

waiting for your answers

MAM

Mohamed,

No difference in the other networks. All you will see if you capture traffic from this client is a UDP packet every 5 seconds. Since then, there is no CASE in your other networks, which is ignored and nothing else changes.

HTH,

Faisal

Tags: Cisco Security

Similar Questions

  • NAC clean access agent forwarding page

    I have a pair of NAM and SIN that I recently upgraded from 4.1 to 4.7 in using the correct upgrade path.  These devices also received new IP addressing.

    My problem is that when a user is routed to the NAS, the redirection page seems to indicate the old IP address of the NAM rather than the new IP address, so naturally cannot display the page.  My host of discovery is set to the IP address of the NAM currently, tried to NAM and NAS.

    Thank you

    Matt

    Matt,

    Look at the certificate installed on your CAs. It is always issued to the old IP/NAME I think. Change cela and try.

    HTH,

    Faisal

  • difference between cisco NAC agent and cisco Clean Access Agent

    Hi all

    If anyone has the idea on different between cisco NAC agent and cisco Clean Access Agent, please let us know your ideas.

    Thank you

    In 4.6, the agent has been revised and is now called the NAC agent.  Previous versions were called the clean access Agent.  So roughly, 4.5 and 4.1.3.2 agent are own access agents, and agents 4.6.x and 4.7.x are called NAC agents.

    Some of the changes are moving a lot of the agent configuration in an XML file, redesign of the GUI, adding a service portion (of the sort that the agent of heel is no longer necessary) and the best journaling agent.

  • API clean access Agent error

    I get an error with the Agent access own version 3.5.13. My University requires that the Agent access to connect to their wireless network.

    When I enter my login information, you immediately receive an error. The first error message is displayed in a pop-up window indicating:

    "Windows API error

    An error has occurred during the call to the function most recent Windows API.

    Error number = 87

    Error = the parameter description is incorrect. »

    After I click 'OK', I get an error message in the windows Clean Access Agent stating:

    "Network error."

    Detail: The parameter is incorrect. [87].

    Here are the details of my PC: laptop Dell Inspiron 1150 w / 512 MB RAM

    XP SP2 Home Edition

    Internet Explorer 7 beta 3 (public version)

    Office 2007 Beta (official Beta Tester)

    .NET framework 1.1 SP1 with KB886903

    .NET framework 2.0

    All the critical updates Microsoft XP

    I used an older version of the Agent access own without getting this error.

    Y at - it a newer version that can fix my error? If Yes, where can I download it?

    IE7 Beta is the question. You will not be able to get through the CCA through the agent until you remove IE7 beta or an Agent updated the CCA is released supporting it.

    About an agent is updated, it should be uploaded through your CCA server, rather than directly.

  • CISCO CLEAN ACCESS AGENT ALWAYS OPENS EVEN ALREADY AUTHENTICATED

    Hello

    Just wonder why officer own access always opens even already authenticated. Please how can I eliminate multiple pop-ups?

    Thank you and best regards,

    Edwin

    Edwin,

    This occurs because of a misconfiguration and is not normal. Give more details about your configuration, a diagram of network if possible.

    Faisal

  • Cannot install Clean Access Manager Server/Bundle (worm: HP Server 4.0)

    Hi all

    can someone help me with the following questions I encountered during the installation of own server access/Manager in

    HP Proliant DL 360 G5

    Type: SAS

    Controller: Controller HP Smart Array P400

    a. first question is if I can install the two Clean Access Server & Manager in a HP Server

    b. after the server starts on the CD, had break showing the command "being run/sbin / loader."

    When I checked it displays "Waiting for device to be stable 20 seconds."

    c.When I tried to only install the clean access server, after loading anaconda it says "no device valid only found o to create new file systems." Plese check your hardware for the problem.

    Waiting for your valuable response for the same

    Dietsch

    CASE and CAM comes as a built... cisco devices is not like a CUCM, Manager of calls where you download the software and put it on a customizable material by you... 3300 servers come on different features... Take a look at the data sheet:

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5707/ps8418/ps6128/product_data_sheet0900aecd802da1b5.html

    3350 and 3390 devices support smart array E200i... and also SAS raid disk controllers...

    b. you must order at least 2 boxes/servers, one for ca and one for CAM... PAK keys/licenses are important here, because the image can be also downloaded EAC, even if you lose the CD... When you order the box, it comes with the basic settings... just for short, you need 1 CAM, 1 CASE, licenses for two then CD are common for SCS and CAM. It's just, you must select the functionlaity in the last step of the installation...

    I hope this helps... all the best...

    REDA

  • ACS - the clean access server

    Hi guys,.

    I have a doubt about the own ACS and access server.

    The clean access server can do the job of the ACS?

    for example, act as a VMPS server, AAA server, or radius server.

    Thank you

    ACS is entirely different to serve own access. See the below url for more details

    http://www.Cisco.com/en/us/products/ps6128/products_qanda_item0900aecd803be813.shtml

  • Cisco Clean Access Update website and Firewall Port required

    Hello

    I was wondering if anyone might know the site that would be to use the clean Access Manager to put as well as the required firewall port. This is due to a firewall in place. From reading, do not know if it uses another website besides as the next http://www.perfigo.com/clean_machine_1/version-se.txt on port 80.

    Thank you.

    Hello

    For CAM checks and update the rules, this is the only site required.

    HTH,

    Faisal

    --

    If you find this article useful, please note so that others can easily find the answer

  • Clean access - manual update of Nessus Plugin

    Hello

    The last nessus.org 2.2 plugin file is greater than the seemed allowed download size via the clean Access Manager Web Interface.

    When I manually download the plugins through the CAM, I get the following error of the CAM.

    Result: Error: could not download content file length error (15954372 > 10485760)

    You don't seem to be able to remove some of the pluggins.tar.gz file for some reason nessus plugins any (I think it is write-protected), so I can't delete files to archive and download a smaller.

    How will I be able to download Nessus Plugins on the CAM? Is there another way that anyone knows? Surely, we should be able to do so through the prompt as well.

    Thank you

    I finally installed this way, but in a slightly different way. I used the tool to update-nessus-plugins to download and install the plugins in the directory. They appear still not in the GUI until I took an individual and any plugin using the GUI. Then all the plugins appeared in the user interface and can be used.

  • Access to the NAC/clean for VOIP phones

    Hello - Here is an excerpt from the manual of the CAM. "You must create a list of filters of the overall system of MAC addresses designed to ignore IP phones through which client computers will connect to your network. "You can set a list of MAC addresses by compiling a collection of individual MAC addresses (Cisco recommends this method only for small deployments).

    That is why - that Cisco is recommended for large deployments?

    Maintain that a list of printers/APs is bad enough, now us need to white list of hundreds of phones? I doubt that generic filters would correspond to each other.

    You can still use the big Bay lighthouse. That's what Cisco has recommended in the past.

    http://www.Cisco.com/en/us/products/ps6128/products_white_paper0900aecd8056c574.shtml

  • anybody out there ever use Mackeeper to clean their Pro? Overtime I start my Pro I get 2 screens telling me that I have 170 questions requiring free cleaning up to 600 mb.s. How can I get these two screens to stop posting overtime?

    Whenever I start my MacPro, 2 screens come in saying that I have to clean my Pro because there are 700 questions.  They want $40 to clean the MacPro? How to stop these 2 screens of popping up whenever I start it? Or should I really do it? Has anyone here ever used Mackeeper?  They are not associated with Apple

    I would highly recommend against installing MacKeeper. It is much better to cause problems then he resolve them.

    Pop - up that claim that you have problems on your Mac is scams. You don't want to call them or allow them to have access to your Mac.

    If this is the case frequently you probably have the adware installed on your Mac. Please download and install https://www.malwarebytes.org to rid your Mac of adware that is infesting it.

  • Question seeks to clean install 10 Windows on the drive of the merger. El Capitan.

    Problem: try a clean install of Windows 10 via the Boot Camp Assistant on an iMac 27 inches (Late2013) with 10.11.4 installs hours (more than 8 hours) and then failed to install Boot Camp updates. Essentially installation take much long than normal and cannot install updates of the Apple software or create normally start Windows Boot Camp 10.

    Background: After problems of slowing down after upgrading to 10.11.4 (with improved Bootcamp Windows 10) who had previously worked fine for 10 months, to the point of a start of OS X time, I decided to do a clean install of my iMac with Fusion 3 to disk.

    As I was unable to remove the partition from Boot Camp through BCA because of his holding always at the same load, I used Internet recovery and reset the Fusion drive. This then required me to repair the partition of Fusion by car through THE "fix" option which seems to work very well. And reinstalled OS X 10.11.4 which works fine now (delays etc..)

    Try using BCA to create a new partition Boot Camp and a clean Windows 10 install after downloading an image of disk W10 directly from Microsoft (Win10_1511_1_English_x64), BCA by downloading software updates and by selecting the desired partition, it began to restart and initialize the installation. However the whole process has been very slow, each step takes much longer than usual, to progress. Leave for hours rest a blank screen or with a circle of rotation.

    I tried with another stick USB 3 and also a USB 2 stick, but none has made a difference.

    In the last attempt, I left running overnight and after 8-9 hours, he finally reaches the top of desktop Windows 10 and the update of Apple Bootcamp starts to load updates. However, he just hung and even after 2 hours, nothing was. Reboot and try once again has been the same.

    After that I tried to create a Windows Installer via BCA 8.0 however it gives just a TPG error when you try to select the drive (due to el Capitan I guess?)

    After four days of efforts, I'm a loser on how to get the Windows 10 on the Boot Camp partition. I can't even install W8 and upgrade due to the error of TPG.

    Any help or suggestions how to proceed with the diagnostic / resolution of the problem would be appreciated.

    Details:

    System: iMac (27 inch, end of 2013), 3.4 GHz Intel Core i5, 16 GB 1600 MHz DDR3, NVIDIA GeForce GTX 780 M 4096 MB, OS X 10.11.4

    • Nothing other than the keyboard and mouse attached via the USB ports, as well as the key USB of BCA. No other attached devices.
    • Reset memory NVRAM, SMC and ran more than once disk utility. No problem not reported.  Ran NVRAM reset before each attempt.
    • At ran EtreCheck report which seemed OK.
    • Verification of diagnosis ran who is childless.

    A detail I noticed after the merger by car there are now two Macintosh HD images when you use boot option. One previously. Are named "Macintosh HD" and "Macintosh HD2". I remember being Yosemite simultaneously in three, but which has been fixed in an update.

    In addition, it seems that no recovery partition. Cmd + R lance Internet recovery.

    Distill the results (the Boot Camp partition removed):

    / dev/disk0 (internal, physical):

    #: NAME SIZE TYPE IDENTIFIER

    0: GUID_partition_scheme * GB 121,3 disk0

    1: disk0s1 EFI EFI 209.7 MB

    2: Apple_CoreStorage GB internal drive 121.0 disk0s2

    3: disk0s3 Apple_Boot Boot OS X 134,2 MB

    / dev/disk2 (internal, physical):

    #: NAME SIZE TYPE IDENTIFIER

    0: GUID_partition_scheme * 3.0 to disk2

    1: disk2s1 NO NAME 209.7 MB EFI

    2: disk2s2 Apple_CoreStorage TB 3.0 drive internal

    3: disk2s4 Apple_Boot Boot OS X 134,2 MB

    / dev/disk3 (internal, virtual):

    #: NAME SIZE TYPE IDENTIFIER

    0: Apple_HFS Macintosh HD + 3.1 TB disk3

    Logical volume on disk0s2, disk2s2

    7BE1F343-ACBE-4144-BF86-C838BE1E49D4

    Fusion unencrypted drive

    iMac - simon: ~ list of cs simon$ diskutil

    CoreStorage groups of logical volumes (1 found)

    |

    + Logical Volume - Group CA0B8D0A-6315-4E85-B313-52AB509473F2

    =========================================================

    Name: Internal drive

    Status: online

    Dimensions: 3121237860352 B (3.1 TB)

    Free space: 0 (0 B) B

    |

    +-Physical volume 5E75EE74-EE1F-4FCB-A0C5-9ED5517FEB93

    |   ----------------------------------------------------

    |   Index: 0

    |   Disc: disk0s2

    |   Status: online

    |   Dimensions: 120988852224 B (121.0 GB)

    |

    +-Physical volume 91D639D6-634E-47C1-AFE5-616CE12E71E0

    |   ----------------------------------------------------

    |   Index: 1

    |   Disc: disk2s2

    |   Status: online

    |   Dimensions: 3000249008128 B (3.0 to)

    |

    +--> Logical volume family EE9934AC-F3CB-4101-ADB6-576F4371B4B9

    ----------------------------------------------------------

    Encryption type: no

    |

    +--> Logical volume 7BE1F343-ACBE-4144-BF86-C838BE1E49D4

    ---------------------------------------------------

    Disc: disk3

    Status: online

    Size (Total): 3106705375232 B (3.1 TB)

    Reversible: no

    Name: Macintosh HD

    Volume name: Macintosh HD

    Content indicator: Apple_HFS

    LVG Type: Fusion, sparse

    Summary:

    Q1: Should it take 4 + hours to install Windows 10 via BCA?

    Q2: Al must ultimately be so slow when initially W10 desktop?

    Q3; What I do once I arrive at the office of W10 but it automatically updates the graphics driver as BC update is simply suspended for centuries and get a working driver to restart at least W10?

    Q4: is there a problem with the disk HARD the Drive of Fusion that is causing all this delay and slow install / boot? ON the clean install OS X 10.11.4 it is back to be fast as usual and all tests show things are OK but W10 goes on the part of the HARD drive. No way to verify this beyond diagnosis or Etrecheck?

    Q5: Y at - it no problem with the GPT / MBR that may be causing the delay etc. ?

    Q6: How can I use my existing WindowsImageBackup backup from the previous W10 with the BCA install usb drive or how to create a USB stick otherwise recovery disk with my other single Mac have W7?

    Q7: How can I install W8 as I once did on Yosemite, via el Capitan without a mistake to TPG on selection of disc?

    Details:

    Day 5. Attempt at 6.

    Partition Boot Camp delete and try again install via BCA. First question, is that when the startup it goes to a blank black screen. For a time nothing left. Reset then using alt to select windows training results in almost instantaneous startup of the BCA message created and the beginning of the installation.

    4 1/2 hours from start of Windows 10 initial signature window.

    Then the second question. One to reach the Boot Camp update Office tries to start and install the drivers. Allows you to "list files...". "stage then sits at the bar about 5% green for 1 to 2 hours and does nothing. All actions in the Office of the W10 takes ages.

    In the meantime, auto update of the W10 appears a message saying that the updated graphics drivers as one of the few messages or actions during this period. Looks like Nvidia install with the entire package of experience (unwanted) etc. and very probably not the correct gpu driver.

    Finally deciding to cancel the installation of BC by killing the Setup.exe process. Then copy Boot camp install files on the desktop. Lasts 30 minutes to copy. Run again and this time, although taking 15-20 minutes to download and install later with the success message.

    Check the graphic driver it shows a yellow exclamation mark, so the following Microsoft instructions I use the uninstall option via the device and then Manager (slowly) come on board to load and download the latest Nvidia driver on their site for the GTX 780 M for 64-bit W10 etc. The same thing that I had used previously. Slow with running the Nvidia Setup program again, but eventually it works only to say that he could not install as unrecognized graphics device...

    He ends up with Microsoft PnP driver so it's at least sufficient start and run it again BC of the figure updates as all other drivers have been installed. To restart, but I get an error of K-Mode that is most likely related to this driver graphic and not possible to start in the new W10 Boot Camp partition after 7 hours.

    I have a picture of W10 backup recovery (WindowsImageBackup) I've had in a few weeks, but it will not install bet for the installed W10. I try with the ACO created the USB windows but can't seem to get a way to get into recovery mode and to get the menu to install it. I don't have a way to create a USB W10 recovery key now because my other Mac has just installed W7.

    Finally I tried to count a reset of the Recovery boot up option but it seems that it will take longer to start.

    I also went to the recovery and selected Boot Mode safe, but it opens on an empty black window and he's here doing nothing.

    Looks like I'll have to restart on via BCA and reinstall and try and solve the problem of graphics in order to install driver updates from BC and restart to W10 and hope that with the drivers, it returns to the operation and the normal starting time. Then update the gpu driver.

    I used and installed Boot Camp several times with over the years including previously an upgrade of W8.1 > W10 I used for over 6 months without problem. I've never known these installation very long or ice once in Windows even for the initial start upward.

    For any help or suggestion would be appreciated, and this seemingly simple process has now expanded to five days.

  • SSO Client AnyConnect & clean access

    I have a Setup ASA 5550 with the AnyConnect Essentials license and it works. Behind the VPN, we have a CA 4.1.8 Server uses SSO. The appearance of this VPN works, but I encounter a problem with OSX and the Agent of CA. Windows and the work of the OSP Agent. When connecting to the VPN via AnyConnect on a MAC (OSX 10.5.8) it connects, but when the Agent it starts to communicate with the CASE you are disconnected.

    I watched the traffic between the ASA and the CASE, the Radius traffic seems good. Is this a bug?

    ASA: 8.2 (1)

    CASE/CAM: 4.1.8

    Officer MAC CA: 4.5.0 (it is supported by docs).

    Thank you

    -Dusty

    Hey dusty,

    Try this:

    -Look in your user appropriate for the dir CCAAgent directory (in my case it was: tprender/Users / / Library/Application Support/Cisco Systems/CCAAgent)

    -Create a preference.plist file if it does not exist - if there is, just add the key/value for "VlanDetectInterval" below channels

    -To create the file, make 'vi preference.plist' and enter these data:

    " http://www.Apple.com/DTDs/ PropertyList - 1.0.dtd" >

    Autopup

    Yes

    VlanDetectInterval

    0

    -Save this file (VI,: wq and), then restart the Cisco NAC Agent (right-click on the icon and exit, then restart in your application menu)

    The VlanDetectInterval must be set to 0 (default is 5) as the Macintosh do stupid things with the vpn interface.

    I hope this helps. Please rate if find you a valid solution.

    See you soon,.

    Tim

  • Questions about the clean Win 8 instalation on Satellite U840 - 10 M

    Hello

    I'll do a clean install of win8 in my laptop. However, I want to ask 2 things:

    1 - is the SRS Sound driver available for 8?

    2. for purposes of formatting, I know I will need to put the hard disk usb and load drivers during the initial phase of win8 install, right? otherwise, hard drive will not be displayed in the list... right? And. What partitions?

    2.1 HARD drive - I won't touch in 14.29 GB Partition, because it is toshiba recovery image right?

    2.2 disk - other partitions I'll delete and create new ones for win8.

    2.3 SSD - do I need to configure anything for Cache SSD? (ie: intel Center Quick config?) or win8 it automatically detects and install it? I'm afraid of this part, because I've seen users trying to config SSD intel quick Center hollow and the end spoil the SSD = solution was only of RMA.

    Thank you

    > 1 - is the SRS Sound driver available for 8?
    Hmm have you visited the page of the Toshiba UE driver and checked this?
    I found this driver: [SRS Sound Driver 1.12.5000 Win 8 | http://www.toshiba.eu/innovation/download_driver_details.jsp?service=EU&selCategory = 2 & selFamily = 2 & selSeries = 198 & selProduct = 7520 & selSh ortMod = null & language = 13 & selOS = 42 & selType = all & yearu pload = & monthupload = & dayupload = & useDate = null & mode = a llMachines & search = & action = search & macId = & country = al l & selectedLanguage = 13 & type = all & page = 3 & ID = 84611 & OSI D = 42 & driverLanguage = 13]

    > 2 - for formatting of the purpose, I know that I will need to put the hard disk usb and load drivers during the initial phase of win8 install, right? otherwise, hard drive will not be displayed in the list... right? And. What partitions?

    You can add the Intel RAID driver in case the HARD drive wouldn't show. Read this
    http://APS2.toshiba-tro.de/KB0/TSB2903E20000R01.htm

    > 2.1 HARD drive - I won't touch in 14.29 GB Partition, because it is toshiba recovery image right?
    Recovery image does not work after installing Win 8. Then create recovery disk before installing Win 8

    > 2.2 HDD - other partitions I'll delete and create new ones for win8.
    You choose the partition where the Windows 8 would be installed. Check above document.

    > 2.3 SSD - do I need to configure anything for SSD Cache? (ie: intel Center Quick config?) or win8 it automatically detects and install it? I'm afraid of this part, because I've seen users trying to config SSD intel quick Center hollow and the end spoil the SSD = solution was only of RMA.

    I think that you don t need to configure anything during the installation of Win 8.

  • Strange question WLAN - can't access secure sites

    Hello!

    I just bought a Toshiba L100-120. All right, except the following.

    I can't access the sites secured with the Intel 3945abg built-in. Other sites are OK.

    If I connect LAN, all is well. If I insert my Wireless PCMCIA card, it works also. The only problem is: to access the sites secured with the Intel wireless device.

    I already changed the drivers, I tried everything. It's very strange :(

    Thanks a lot if someone has an idea!

    Hello

    I'm a bit confused of Mr. do you mean WLan secure or secure Web sites?

    If you can not enter the secure, encrypted WiFi network, you must enter the right key.
    In other cases, so some Web sites are not displayed you can try changing the privacy settings of IE for the Internet zone.

Maybe you are looking for