Clean access agent keep on running again and again

Added some registry checks in NAC 4.5 after that Clean access Agent keeps on running again and again on the client(looping)
Thanks

Philip,
Windows 7 wasn't supported with CCA till 4.7.x and agents also have to be 4.7.x
Best approach would be to get to a supported version and then if that doesn't work we can work with you to see what might be causing this.
HTH,
Faisal

Similar Messages

NAC - Clean Access Agents keeps poping up even when it's authenticated

Hi All,
I've setup OOB/IB/L3 NAC. after login to CAA, authentication happens and VLAN is changed on switch. But CAA pops up again and asks for usrename and password, even it's been already authenticated.
any suggestion would be appreciated.
Alex

Alex,
How are you forcing the traffic to the NAC? Using ACLs or PBRs?
What you're describing indicates that you're more than likely using ACL method. If so, ensure that in your access subnet, you are disallowing traffic being sent to the CAS. After your client authenticates and is in the access VLAN, the agent would still continue to send out the discovery packets every 5 seconds, and if that traffic is allowed in the access VLAN, it will pop the agent up again.
HTH,
Faisal

Problem with Clean Access Agent and Windows Updater

I have a problem with a laptop when using Cisco Clean Access Agent. The agent keeps directing the laptop to get updates from the Windows Update site, but when I have connected the laptop via cable, windows updates tells me there are no updates either essential or optional. The laptop is a Sony VIVO VGN-FJ270 running XP Home Edition SP2 and the Clean Access Agent is version 4.0.2.1
Any help is appreciated!!

Verify the allowed hosts in CCA agent.
Try these link:
http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html
http://www.cisco.com/en/US/products/ps6128/products_qanda_item09186a00803b7a81.shtml

Different between cisco NAC agent and cisco Clean Access Agent

Hi all,
if anyone has idea about different between cisco NAC agent and cisco Clean Access Agent, please share your ideas.
thank you

In 4.6, the agent was overhauled and is now called the NAC agent. Previous versions were referred to as the Clean Access Agent. So pretty much, the 4.5 agent and 4.1.3.2 agents are Clean Access agents, and the 4.6.x and 4.7.x agents are called NAC agents.
Some of the changes made were moving a lot of the agent configuration to an XML file, redesigning the GUI, adding a service portion (so that the stub agent is no longer required), and better agent logging.

Clean Access Agent error

Hi there
I don't know why, every time I try to log on to Clean Access agent I get this error message. (see attached doc.) It prevents me from logging on. Then I have to remove the program, turn off the pc. Turn on the pc again to reinstall the program for it to works.
can anyone help?
many thanks
paul

What version are you running of CCA Agent and NAC Appliance Server ?
This is not normal behaviour so can you try to disable AV, Firewall etc and try running the Agent Again.
The Agent will poll every 5 secs to discover the CAS, using the Discovery Host which will either be an IP or hostname. If it is a hostname make sure it is resolvable.
Inti

Clean Access Agent in Windows 8, 64 bit

Hey guys,
I posted this on another Cisco community site, someone there suggested I try here. He also gave me this page as a possible solution but I'm unable to download from the page as I don't have a service contract, I'm just a Dad trying to get his kid's computer online at school.
http://www.cisco.com/cisco/software/release.html?mdfid=282855549&flowid=34712&softwareid=282573326&release=4.8.3&relind=AVAILABLE&rellifecycle=&reltype
Kind of at our wit's end here. My daughter is at Mass Art in Boston with a nearly new computer (6 months old at most) with Windows 8 Pro and the Clean Access Agent isn't letting her connect saying she has no updated AV installed. However, we did have BitDefender installed and updated and I've seen BitDefender on a Cisco list on line somewhere, the tech department at the school also said that it should work. Thinking there might be a conflict with BitDefender and Windows Defender we uninstalled BitDefender but to no avail, the agent still won't allow access.
Now the tech dept. at the school is telling her she has to reformat her hard drive (Ha!!) which is simply and completely unacceptable.
Does anyone here know if the above link may solve our problem?
Can someone send me the necessary files?
Is there someone the school tech people can contact for this?
Am I asking enough annoying questions?
Many thanks for your time,
Ken

Hello Ajay,
When I try to download either the "4.8.3 Patch for Windows 8 support" or the "4.8.3 Patch for Windows 8 Official support" it says I need a service contract. Which, of course, I don't have. I'm just a Dad trying to get his kids computer connected to the school's network!
Do you know what the difference is between the "4.8.3 Patch for Windows 8 support" and the "4.8.3 Patch for Windows 8 Official support" downloads?
Might you be able to email me what I need to [email protected]?
I don't know how all of this works between the school and Cisco but if you can't send it to me might it be something the tech support people at the school can download? I would have to guess they do, indeed, have a service contract.
Thanks again,
Ken

Clean Access Agent can't popup

Hi, we setup a CAS and CAM in L2 OOB virtuil gateway and the switch is a 3560 using SVI and L3 for routing. We can authenticate using web agent but there is a problem when using a Clean Access agent. I have configured the discovery host using the ip address of the CAM but the login doesn't popup. I changed the discovery host of the ip of the server and tried reinstalling the access agent but login doesn't popup. Do I need to reboot the server when i changed the ip of the discovery host?What do i need to configure on the CAM or CAS?

For L2 or L3 deployments, the Clean Access Agent will pop up on the client if "Popup Login Window" is enabled on the Agent and the Agent detects it is behind the Clean Access Server. If the Agent does not pop up, this indicates it cannot reach the CAS.
To Troubleshoot L2 Deployments:
1. Make sure the client machine can get a correct IP address. Open a command tool (Start > Run > cmd) and type ipfconfig or ipconfig /all to check the client IP address information.
2. If necessary, type ipconfig /release, then ipconfig /renew to reset the DHCP lease for the client.
To Troubleshoot L3 Deployments:
1. Check whether the Discovery Host field is set to the IP address of the CAM itself under Device Management > Clean Access > Clean Access Agent > Installation | Discovery Host. This field must be the address of a device on the trusted side and cannot be the address of the CAS.
2. Uninstall the Clean Access Agent on the client.
3. Change the Discovery Host field to the IP address of the CAM and click Update.
4. Reboot the CAS.
5. Re-download and re-install the Clean Access Agent on the client.
Note The Login option on the Clean Access Agent is correctly disabled (greyed out) in the following cases:
â¢For OOB deployments, the Agent user is already logged in through the CAS and the client port is on the Access VLAN.
â¢For multi-hop L3 deployments, Single Sign-On (SSO) has been enabled and the user has already authenticated through the VPN concentrator (therefore is already automatically logged into Cisco NAC Appliance).
â¢MAC address-based authentication is configured for the machine of this user and therefore no user login is required.

ITunes 11.0.3 asks for password again and again, have re-done my credit card details, have changed my Apple ID password, tried to log in and out of iTunes, none of thos seem to work, just keeps happening without end, please help

I have tried to re-install iTunes 11.0.3 at least 6 times.
I have also downloaded iTunes 11.0.3 at least 5 times.
I have changed my Apple ID password.
I have downloaded (again, I've done that many times) iTunes 11.0.3, then I switched off the iMac, then restarted the wi-fi modem. Switched on the iMac, loaded iTunes, same problem.
I tried to just switch off the wi-fi, did the same as point above, same problem.
Even tried to change the system date to 2038, this only seemed (although I doubt it) to fix the "not responding" issue which I had this morning.
The Apple ID password issue, where it asks me for the password loads and loads of times (probably 50 times or more), one after the other has been happening for about 3 days now.
Here is a copy of my message problem:
iTunes Problem, can't seem to find a solution online.
I am running OS X 10.8.3 on an iMac, have just loaded iTunes 11.0.3 a few days ago.
Firstly, I'd open iTunes and it would immediately say it was not responding, I'd have to force quit, try again, re-boot, try again etc. I tried re-installing iTunes, changing password, everything to no avail, then changed my date to 2038, and voila it started responding (no, don't ask me, I just read in online and was desperate enough to try it). Of course, I don't believe that this actually helped, I would like to know what did help or if there is something specific one needs to do to fix this.
I have not been able to get rid of this problem: Whenever I try to make a purchase it asks for my Apple ID password, dozens of times until I give up and press cancel, cancel, cancel.
Why does it do this? I don't want to purchase anything because I can't keep typing in my password again and again. I'm not exaggerating.
As I mentioned, I have tried to re-install iTunes, about 6 times, and I changed my password. I still get the same problem.
Also, my iTunes still looks like the classical iTunes and doesn't have the new interface.
Has anyone experienced this and was able to fix it, or does anyone know what the problem is? Please help, I'm at my wits end.

Because too much time has passed I can't edit this into the prior comment, but here is the info regarding reverting to iTunes 11.0.2 (assuming you do have a time machine backup) from https://discussions.apple.com/message/22057703#22057703
W. Raider wrote:
Repairing permissions doesn't fix it.
I reverted to the previous version, 11.0.2.
1. Quit the new crash-prone iTunes.
2. Delete the app.
3. Restore v. 11.0.2 with Time Machine.
4. In your iTunes folder look for a folder called "Previous iTunes Libraries", find the latest one.
5. In the iTunes folder itself you'll see "iTunes Library.itl", delete it (or compress it and save a copy for later just in case.
6. Copy the newest .itl file in Previous iTunes Libraries to the iTunes folder and rename it "iTunes Library.itl".
7. Launch the older version of iTunes.
My crashing has seemed to have ceased with a revert to an older version. I noticed today that the newer crashing iTunes had been launched for hours but not playing anything, when I played internet radio it crashed within 5mins, fed up I reverted to an older version.
Btw, a simpler way to do this is to revert to older iTunes app, then hold Option when it launches and choose an older library.

Keep asking for my serial number again and again

Have just installed CS5 , all paid up, all signed up, all numbers given and verified, but.....nothing CS5 works, all keep asking for my serial number again and again, accept and verify number is correct, adobe tells me I'm all up and good and running, then screen tells me I'm not licensed so it closes down. same in InDesign, and Photoshop. What the hell is going on Adobe??????

Could be a permissions problem, so the licensing never can persistently verify the serial and create the necessary key files. Try creating another user account with admin privileges and run it from there, then check the settings on your existing account and the pertinent user data folders.
Mylenium

Nac appliance - clean access agent report

Hi,
I have been searching a lot, and I don't find any good explanation about how the clean access agent report works. I experienced that not all agent activity will be reported. Sometimes it showed up report about the "passed" and "failed" agent, but not at another time. Would someone give me explanation about when the agent will show up reports and it will not ? or did it show bugs ?
Thanks in advance.

Hi,
does anybody experience this ? or Everything is going fine on your NAC ? I am using NAC 4.1.3.1.
Thanks.

Removing Cisco Clean Access Agent 4.5 (CCA)

I'm more or less having trouble with uninstalling Cisco Clean Access Agent 4.5.0.0, so I can install CCA 4.1...
I removed CCAAgent 4.5 + the files within "Library/ApplicationSupport/" and in "Library/Receipts"...yet when I try to install 4.1, it tells me there's a newer version of the software on this disk & won't let me install.
I am on Snow Leopard, too - by the way.
Any solutions to this?

Tim:
Seen this page yet....anything there help?
http://www.cisco.com/en/US/docs/security/nac/appliance/configurationguide/45/cam/magntd.html#wp1276391
Do you have a fresh backup if needed? Have you tried repairing permissions and checking for hidden files with a similar name?

Cisco Clean Access Agent patch?

I just upgraded to Snow Leopard today without realizing that my campus uses Cisco's Clean Access Agent to allow access to the network. Every time I try to log in log in it tells me "Agent user operator system not supported." It is version 4.6.0.3. I realize now that this is not a campus problem, but more likely a program problem. Is there any word on a way around this or a patch in the near future?
Thanks.

The same issue occurred on my campus. Cisco claims they will fix the problem between 3 and 90 days.

NAC Clean Access Agent Issue

Hi,
Can anyone tell me that If I want my user to download clean access agent so how can I achieve that...I have uploaded agent to my CAM but Im confused that should my user use web agent first then download the agent over network or he can download Clean agent directly ?

Unlike the Clean Access Agent, the Cisco NAC Web Agent is not a "persistent" entity, thus it only exists on the client machine long enough to accommodate a single user session. Instead of downloading and installing an Agent application, once the user opens a browser window, logs in to the NAC Appliance web login page, and chooses to launch the temporal Cisco NAC Web Agent, an ActiveX control or Java applet (you specify the preferred method using the Web Client (ActiveX/Applet) option in the Administration > User Pages > Login Page configuration page) initiates a self-extracting Agent Stub installer on the client machine to install Agent files in a client's temporary directory, perform posture assessment/scan the system to ensure security compliance, and report compliance status back to the NAC Appliance system. During this period, the user is granted access only to the Temporary Role and if the client machine is not compliant for one or more reasons, the user is informed of the issues preventing network access and may do one of the following as mentioned in the below URL:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cam/m_cca.html#wp1130212

CISCO CLEAN ACCESS AGENT ALWAYS POPS-UP EVEN ALREADY AUTHENTICATED

Hello,
Just wonder why clean access agent always pops-up even already authenticated. Please how can i eliminate those multiple pops-up?
thank you and best regards,
Edwin

Hi:
I have the same issue. Would you please tell me what you did exactly?
I am using OOB VGW mode.
NAC version is 4.7.2
Switch configurations:
snmp-server community RO RO
snmp-server community RW RW
snmp-server location LOCATION
snmp-server contact CONTACT
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move threshold
snmp-server host CAM_IP version 2c RW mac-notification snmp
mac address-table notification change interval 0
mac address-table notification change
mac address-table aging-time 3600

Clean Access Agent

Hello
Has anybody seen this error before... it's the first time I see it.
"The Server Response could not be Parsed [12152]"
I get this error only in one machine in-band & out-of-band.
Thanks For any help

Check the following as one of them would be causing this error in clean access agent:
1)Ensure that clock on the CAM and CAS are synchronized to be less than 5 mins apart.
2) Check all the switch configs to make sure they are good.
3) Check if the vlans are pruned. If they are not pruned then prune vlans as this could be overloading the mac table
4) Check if you have configured managed subnets for all the vlans passing through CAS? If not, could configure it in [Device Management -> CCA
Servers -> Advanced -> Managed Subnets]
Also providing the event Log and CAS log will help us to troubleshoot the issue better.

Clean access agent keep on running again and again

Similar Messages

Maybe you are looking for