CISCO CLEAN ACCESS AGENT ALWAYS POPS-UP EVEN ALREADY AUTHENTICATED

Hello,
Just wonder why clean access agent always pops-up even already authenticated. Please how can i eliminate those multiple pops-up?
thank you and best regards,
Edwin

Hi:
I have the same issue. Would you please tell me what you did exactly?
I am using OOB VGW mode.
NAC version is 4.7.2
Switch configurations:
snmp-server community RO RO
snmp-server community RW RW
snmp-server location LOCATION
snmp-server contact CONTACT
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move threshold
snmp-server host CAM_IP version 2c RW mac-notification snmp
mac address-table notification change interval 0
mac address-table notification change
mac address-table aging-time 3600

Similar Messages

Removing Cisco Clean Access Agent 4.5 (CCA)

I'm more or less having trouble with uninstalling Cisco Clean Access Agent 4.5.0.0, so I can install CCA 4.1...
I removed CCAAgent 4.5 + the files within "Library/ApplicationSupport/" and in "Library/Receipts"...yet when I try to install 4.1, it tells me there's a newer version of the software on this disk & won't let me install.
I am on Snow Leopard, too - by the way.
Any solutions to this?

Tim:
Seen this page yet....anything there help?
http://www.cisco.com/en/US/docs/security/nac/appliance/configurationguide/45/cam/magntd.html#wp1276391
Do you have a fresh backup if needed? Have you tried repairing permissions and checking for hidden files with a similar name?

Cisco Clean Access agent for Ipad

My university uses Cisco Clean Access agent for wifi.
I have been able to login using the alotted password through Safari, however the next step is a prompt to download Clean Access Agent.
When I try to download the application, Safari prompts that the file can not be downloaded.
Any suggestions for this problem so that I can use my Ipad at campus.

The only things you can download are on the App Store. Check there, but I'm mostly sure that there is no Cisco Clean Agent available for iphone.

Different between cisco NAC agent and cisco Clean Access Agent

Hi all,
if anyone has idea about different between cisco NAC agent and cisco Clean Access Agent, please share your ideas.
thank you

In 4.6, the agent was overhauled and is now called the NAC agent. Previous versions were referred to as the Clean Access Agent. So pretty much, the 4.5 agent and 4.1.3.2 agents are Clean Access agents, and the 4.6.x and 4.7.x agents are called NAC agents.
Some of the changes made were moving a lot of the agent configuration to an XML file, redesigning the GUI, adding a service portion (so that the stub agent is no longer required), and better agent logging.

Cisco Clean Access Agent patch?

I just upgraded to Snow Leopard today without realizing that my campus uses Cisco's Clean Access Agent to allow access to the network. Every time I try to log in log in it tells me "Agent user operator system not supported." It is version 4.6.0.3. I realize now that this is not a campus problem, but more likely a program problem. Is there any word on a way around this or a patch in the near future?
Thanks.

The same issue occurred on my campus. Cisco claims they will fix the problem between 3 and 90 days.

NAC - Clean Access Agents keeps poping up even when it's authenticated

Hi All,
I've setup OOB/IB/L3 NAC. after login to CAA, authentication happens and VLAN is changed on switch. But CAA pops up again and asks for usrename and password, even it's been already authenticated.
any suggestion would be appreciated.
Alex

Alex,
How are you forcing the traffic to the NAC? Using ACLs or PBRs?
What you're describing indicates that you're more than likely using ACL method. If so, ensure that in your access subnet, you are disallowing traffic being sent to the CAS. After your client authenticates and is in the access VLAN, the agent would still continue to send out the discovery packets every 5 seconds, and if that traffic is allowed in the access VLAN, it will pop the agent up again.
HTH,
Faisal

NAC Cisco Clean Access Agent - launch self signed application, remediation

Hi,
we are trying to run custom executable in remediation process with non-admin rights. As I understand it there are following requirements in order to be able to do that:
1) CAA Stub have to be installed
2) Application have to be signed with trusted certificate
3) Certificate and Application details have to be written in registry structure to be trusted by agent stub.
We've followed every step in documentation but still receiving the same error in event log:
"jada_jada.exe" is not a qualified file to be executed.
Can't figure out why is it refusing to execute it, we tried every combination.
Any idea what may be preventing it?
Thanks

Hi,
thank you for reply ... yes I have root cert installed on client machine, when I look at file properties, it says certificate is OK. One thing that comes to my mind though is that I am member of domain, so maybe certificate have to be installed as root at domain controller?
When I have the opportunity I will try it.

Cisco Clean Access Agent

I am a university student and I am getting errors getting connecting to wireless. CCAA cannot detect my Bitdefender 2008 Antivirus. There should be someone who should watch software version changes and update CCAA. Every time I have to email cisco for these changes and sometimes it takes many days for the change. Please check.

Can anyone help?

Cisco Clean Access Agent and Vista/UAC

Anyone have any idea on how to allow the agent to start w/o kicking off UAC for a non-admin user? Hate the thought of having to disable security (UAC) to further security (enforce software policies). Thanks in advance.
Dean
Univ of Dayton

Just to follow up (on my own post ;-)):
"What you are seeing is unfortunately expected behavior. With 4.1.3.1 we ask for the highest available privileges. As an admin this produces a UAC prompt to give all privileges. There has been an enhancement bug filed to change the behavior in future versions."

Cisco Clean Access Agent + Vista Hotfixes

I'm unable to fix a few computers in the Accommodation I'm staying at in Salford and the computers are running Vista. I've sorted out the Certificate Revocation * and the SSL 2.0 + SSL 3.0. But it's now having problems with the Vista Hotfixes, has anyone else had this problem?
I'm a student, and because the ISD people can't come out for two weeks I've taken to fixing the computers for my friends and anyone who hears that I can do it.
I'd be very greatful if someone could help me!
Thanks!

Just to follow up (on my own post ;-)):
"What you are seeing is unfortunately expected behavior. With 4.1.3.1 we ask for the highest available privileges. As an admin this produces a UAC prompt to give all privileges. There has been an enhancement bug filed to change the behavior in future versions."

Clean Access Agent continually reauthentication

Hi,
I have installed CAM and CAS version 4.1.0 in OOB mode and having this problem of clean access agent repeatedly popping up even after successfuly logging on to the server.
Also the clients are always requested to download and install the clean access agent even when it is already installed in the system.
After the succesfull log on I can see the respective client as sucessfully logged on to the system. Also the VLANs are correctly switched from Authentication to User VLANs, but still I'm repeatedly asked to log on to the system.
These symptoms familar to anybody and appreciate any idea to help me come out of this.
Thanks.

Hi,
Have u added the managed subnet?
(CCA Servers> Manage [CAS-IP]> Advanced > managed subnet.

Clean Access Agent can't popup

Hi, we setup a CAS and CAM in L2 OOB virtuil gateway and the switch is a 3560 using SVI and L3 for routing. We can authenticate using web agent but there is a problem when using a Clean Access agent. I have configured the discovery host using the ip address of the CAM but the login doesn't popup. I changed the discovery host of the ip of the server and tried reinstalling the access agent but login doesn't popup. Do I need to reboot the server when i changed the ip of the discovery host?What do i need to configure on the CAM or CAS?

For L2 or L3 deployments, the Clean Access Agent will pop up on the client if "Popup Login Window" is enabled on the Agent and the Agent detects it is behind the Clean Access Server. If the Agent does not pop up, this indicates it cannot reach the CAS.
To Troubleshoot L2 Deployments:
1. Make sure the client machine can get a correct IP address. Open a command tool (Start > Run > cmd) and type ipfconfig or ipconfig /all to check the client IP address information.
2. If necessary, type ipconfig /release, then ipconfig /renew to reset the DHCP lease for the client.
To Troubleshoot L3 Deployments:
1. Check whether the Discovery Host field is set to the IP address of the CAM itself under Device Management > Clean Access > Clean Access Agent > Installation | Discovery Host. This field must be the address of a device on the trusted side and cannot be the address of the CAS.
2. Uninstall the Clean Access Agent on the client.
3. Change the Discovery Host field to the IP address of the CAM and click Update.
4. Reboot the CAS.
5. Re-download and re-install the Clean Access Agent on the client.
Note The Login option on the Clean Access Agent is correctly disabled (greyed out) in the following cases:
â¢For OOB deployments, the Agent user is already logged in through the CAS and the client port is on the Access VLAN.
â¢For multi-hop L3 deployments, Single Sign-On (SSO) has been enabled and the user has already authenticated through the VPN concentrator (therefore is already automatically logged into Cisco NAC Appliance).
â¢MAC address-based authentication is configured for the machine of this user and therefore no user login is required.

Run-time error '7': Out of memory - Cisco Clean Access problem

Hi all,
I hope this question is in the appropriate place. I'm trying to use my company's vpn service. Here's how the process should work:
1) Log on with username/password using Cisco AnyConnect VPN Client
2) Log-in to the portal. During this step the Cisco Clean Access Agent is supposed to automatically log-in. However I get the following error:
Run-time error '7':
Out of memory
My company's network services didn't seem to be much of a help so I was hoping one of you would have a good suggestion(s).
Please keep in mind that I'm not great with computers. I know how to use them and all that but I'm not familiar with the inner-workings at all (registry editing etc.)
Thanks in advance!
-Bill

I should add that the version of CCA is 4.1.10

Problem with Clean Access Agent and Windows Updater

I have a problem with a laptop when using Cisco Clean Access Agent. The agent keeps directing the laptop to get updates from the Windows Update site, but when I have connected the laptop via cable, windows updates tells me there are no updates either essential or optional. The laptop is a Sony VIVO VGN-FJ270 running XP Home Edition SP2 and the Clean Access Agent is version 4.0.2.1
Any help is appreciated!!

Verify the allowed hosts in CCA agent.
Try these link:
http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html
http://www.cisco.com/en/US/products/ps6128/products_qanda_item09186a00803b7a81.shtml

Clean Access Agent for iPhone?

My campus wireless can only be accessed if my computer (or iPhone) has Cisco clean access agent installed.
Is there a download for the iPhone that allows me to connect to the wireless network? Or is there a way around it?
Thanks.

The only things you can download are on the App Store. Check there, but I'm mostly sure that there is no Cisco Clean Agent available for iphone.

CISCO CLEAN ACCESS AGENT ALWAYS POPS-UP EVEN ALREADY AUTHENTICATED

Similar Messages

Maybe you are looking for