NAC Cisco Clean Access Agent - launch self signed application, remediation

Hi,
we are trying to run custom executable in remediation process with non-admin rights. As I understand it there are following requirements in order to be able to do that:
1) CAA Stub have to be installed
2) Application have to be signed with trusted certificate
3) Certificate and Application details have to be written in registry structure to be trusted by agent stub.
We've followed every step in documentation but still receiving the same error in event log:
"jada_jada.exe" is not a qualified file to be executed.
Can't figure out why is it refusing to execute it, we tried every combination.
Any idea what may be preventing it?
Thanks

Hi,
thank you for reply ... yes I have root cert installed on client machine, when I look at file properties, it says certificate is OK. One thing that comes to my mind though is that I am member of domain, so maybe certificate have to be installed as root at domain controller?
When I have the opportunity I will try it.

Similar Messages

  • Different between cisco NAC agent and cisco Clean Access Agent

    Hi all,
    if anyone has idea about different between cisco NAC agent and cisco Clean Access Agent, please share your ideas.
    thank you

    In 4.6, the agent was overhauled and is now called the NAC agent.  Previous versions were referred to as the Clean Access Agent.  So pretty much, the 4.5 agent and 4.1.3.2 agents are Clean Access agents, and the 4.6.x and 4.7.x agents are called NAC agents.
    Some of the changes made were moving a lot of the agent configuration to an XML file, redesigning the GUI, adding a service portion (so that the stub agent is no longer required), and better agent logging.

  • Removing Cisco Clean Access Agent 4.5 (CCA)

    I'm more or less having trouble with uninstalling Cisco Clean Access Agent 4.5.0.0, so I can install CCA 4.1...
    I removed CCAAgent 4.5 + the files within "Library/ApplicationSupport/" and in "Library/Receipts"...yet when I try to install 4.1, it tells me there's a newer version of the software on this disk & won't let me install.
    I am on Snow Leopard, too - by the way.
    Any solutions to this?

    Tim:
    Seen this page yet....anything there help?
    http://www.cisco.com/en/US/docs/security/nac/appliance/configurationguide/45/cam/magntd.html#wp1276391
    Do you have a fresh backup if needed? Have you tried repairing permissions and checking for hidden files with a similar name?

  • Cisco Clean Access agent for Ipad

    My university uses Cisco Clean Access agent for wifi.
    I have been able to login using the alotted password through Safari, however the next step is a prompt to download Clean Access Agent.
    When I try to download the application, Safari prompts that the file can not be downloaded.
    Any suggestions for this problem so that I can use my Ipad at campus.

    The only things you can download are on the App Store. Check there, but I'm mostly sure that there is no Cisco Clean Agent available for iphone.

  • Nac appliance - clean access agent report

    Hi,
    I have been searching a lot, and I don't find any good explanation about how the clean access agent report works. I experienced that not all agent activity will be reported. Sometimes it showed up report about the "passed" and "failed" agent, but not at another time. Would someone give me explanation about when the agent will show up reports and it will not ? or did it show bugs ?
    Thanks in advance.

    Hi,
    does anybody experience this ? or Everything is going fine on your NAC ? I am using NAC 4.1.3.1.
    Thanks.

  • Cisco Clean Access Agent patch?

    I just upgraded to Snow Leopard today without realizing that my campus uses Cisco's Clean Access Agent to allow access to the network. Every time I try to log in log in it tells me "Agent user operator system not supported." It is version 4.6.0.3. I realize now that this is not a campus problem, but more likely a program problem. Is there any word on a way around this or a patch in the near future?
    Thanks.

    The same issue occurred on my campus. Cisco claims they will fix the problem between 3 and 90 days.

  • CISCO CLEAN ACCESS AGENT ALWAYS POPS-UP EVEN ALREADY AUTHENTICATED

    Hello,
    Just wonder why clean access agent always pops-up even already authenticated. Please how can i eliminate those multiple pops-up?
    thank you and best regards,
    Edwin

    Hi:
    I have the same issue. Would you please tell me what you did exactly?
    I am using OOB VGW mode.
    NAC version is 4.7.2
    Switch configurations:
    snmp-server community RO RO
    snmp-server community RW RW
    snmp-server location LOCATION
    snmp-server contact CONTACT
    snmp-server enable traps snmp linkdown linkup
    snmp-server enable traps mac-notification change move threshold
    snmp-server host CAM_IP version 2c RW  mac-notification snmp
    mac address-table notification change interval 0
    mac address-table notification change
    mac address-table aging-time 3600

  • Cisco Clean Access Agent

    I am a university student and I am getting errors getting connecting to wireless. CCAA cannot detect my Bitdefender 2008 Antivirus. There should be someone who should watch software version changes and update CCAA. Every time I have to email cisco for these changes and sometimes it takes many days for the change. Please check.

    Can anyone help?

  • Cisco Clean Access Agent and Vista/UAC

    Anyone have any idea on how to allow the agent to start w/o kicking off UAC for a non-admin user? Hate the thought of having to disable security (UAC) to further security (enforce software policies). Thanks in advance.
    Dean
    Univ of Dayton

    Just to follow up (on my own post ;-)):
    "What you are seeing is unfortunately expected behavior. With 4.1.3.1 we ask for the highest available privileges. As an admin this produces a UAC prompt to give all privileges. There has been an enhancement bug filed to change the behavior in future versions."

  • Cisco Clean Access Agent + Vista Hotfixes

    I'm unable to fix a few computers in the Accommodation I'm staying at in Salford and the computers are running Vista. I've sorted out the Certificate Revocation * and the SSL 2.0 + SSL 3.0. But it's now having problems with the Vista Hotfixes, has anyone else had this problem?
    I'm a student, and because the ISD people can't come out for two weeks I've taken to fixing the computers for my friends and anyone who hears that I can do it.
    I'd be very greatful if someone could help me!
    Thanks!

    Just to follow up (on my own post ;-)):
    "What you are seeing is unfortunately expected behavior. With 4.1.3.1 we ask for the highest available privileges. As an admin this produces a UAC prompt to give all privileges. There has been an enhancement bug filed to change the behavior in future versions."

  • Run-time error '7': Out of memory - Cisco Clean Access problem

    Hi all,
    I hope this question is in the appropriate place. I'm trying to use my company's vpn service. Here's how the process should work:
    1) Log on with username/password using Cisco AnyConnect VPN Client
    2) Log-in to the portal. During this step the Cisco Clean Access Agent is supposed to automatically log-in. However I get the following error:
    Run-time error '7':
    Out of memory
    My company's network services didn't seem to be much of a help so I was hoping one of you would have a good suggestion(s).
    Please keep in mind that I'm not great with computers. I know how to use them and all that but I'm not familiar with the inner-workings at all (registry editing etc.)
    Thanks in advance!
    -Bill

    I should add that the version of CCA is 4.1.10

  • Problem with Clean Access Agent and Windows Updater

    I have a problem with a laptop when using Cisco Clean Access Agent. The agent keeps directing the laptop to get updates from the Windows Update site, but when I have connected the laptop via cable, windows updates tells me there are no updates either essential or optional. The laptop is a Sony VIVO VGN-FJ270 running XP Home Edition SP2 and the Clean Access Agent is version 4.0.2.1
    Any help is appreciated!!

    Verify the allowed hosts in CCA agent.
    Try these link:
    http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html
    http://www.cisco.com/en/US/products/ps6128/products_qanda_item09186a00803b7a81.shtml

  • Clean Access Agent for iPhone?

    My campus wireless can only be accessed if my computer (or iPhone) has Cisco clean access agent installed.
    Is there a download for the iPhone that allows me to connect to the wireless network? Or is there a way around it?
    Thanks.

    The only things you can download are on the App Store. Check there, but I'm mostly sure that there is no Cisco Clean Agent available for iphone.

  • Clean Access Agent Slows Computer

    I have downloaded Cisco Clean Access Agent 4.1.3.0 as required by my school.
    However, I have noticed that after upgrading from 4.1.2.0, the new version takes up so much CPU (up to 99% sometimes) that iTunes and YouTube skip when they are playing audio.
    Any suggestions on a fix for this issue?
    Thanks,
    Geoff

    No ideas???

  • NAC Clean Access Agent Issue

    Hi,
    Can anyone tell me that If I want my user to download clean access agent so how can I achieve that...I have uploaded agent to my CAM but Im confused that should my user use web agent first then download the agent over network or he can download Clean agent directly ?

    Unlike the Clean Access Agent, the Cisco NAC Web Agent is not a "persistent" entity, thus it only exists on the client machine long enough to accommodate a single user session. Instead of downloading and installing an Agent application, once the user opens a browser window, logs in to the NAC Appliance web login page, and chooses to launch the temporal Cisco NAC Web Agent, an ActiveX control or Java applet (you specify the preferred method using the Web Client (ActiveX/Applet) option in the Administration > User Pages > Login Page configuration page) initiates a self-extracting Agent Stub installer on the client machine to install Agent files in a client's temporary directory, perform posture assessment/scan the system to ensure security compliance, and report compliance status back to the NAC Appliance system. During this period, the user is granted access only to the Temporary Role and if the client machine is not compliant for one or more reasons, the user is informed of the issues preventing network access and may do one of the following as mentioned in the below URL:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cam/m_cca.html#wp1130212

Maybe you are looking for

  • How to Add a page Item in Indesign Library Panel

    Hi All, I am trying to add page Item in Indesign Library Panel using ILibraryCmdUtils::ProcessLibraryAddItemCmd() But it shows the message of Heap corrupt while processing the commmand. Can any one help me out with some code snippet ? Pete. M. Mitche

  • [SOLVED] Wanted: extract pdf annotations created in Mac OSX preview

    I just had a collegue return a pdf marked up with "annotations". I first struggled with finding a viewer that views the annotations, and those that could (evince, okular) all have more dependencies that I'd want/need. I decided there must be an light

  • Time Machine Deleting Old Backups!!

    Good morning, I recently installed a new hard drive and a clean OS X 10.6.3 in my MacBook Pro (2008). I plugged in my Time Machine back-up drive, and TM started getting rid of my old back-ups! Can anyone advise me on what is happening and how to prev

  • Bridge CS3 Freezes

    Bridge CS3 just freezes when I open it. Simply just will not navigate and the icons appear only partly. Running OS X 10.5.6 on a G5. Bridge v2.1.1 (have done updates for both) This was running no problem then I replaced a crashed hard drive and had t

  • Musical Logic Pro Task Bar with Apogee Ensemble

    1.)Since I installed the Apogee Ensemble unit, a musical note sounds when I start up my MAC, when I press the Start or Stop button in Logic Studio, etc. What option do I need to reset to turn this off? 2.) When I use Input 1 on my Emagic AMT Midi int