Clean Access AV Version Updates

I manage Clean Access on a small college network. We allow several different AV products. One of the most popular is AVG because it's small, fast, unobtrusive, and free.
AVG recently released v8, but Clean Access won't recognize it and there is no option to allow v8 in my AV rule list.
My general question is for Cisco:
What kind of communication do you maintain with AV vendors so that the Clean Access list is kept up-to-date with current AV product versions?
This is especially troublesome with users who have purchased AV products such as Norton 360, McAfee, etc. Upgrades for these products come out, but are not support by Clean Access and I have to tell users to either go back to the previous version, or uninstall their current product and use a free one like AVG.
Am I missing something, or is this a problem for other Clean Access admins out there, too?
-Mike

I spoke with Cisco support about this last week. 4.1.3.2 will recognize the program, but the definition files are NOT supported (in AVG 8, Free edition).
According to the tech, AVG 8.0 (both Free and Pay versions) will be fully supported in the big software release at the end of this month (is it out yet?).
In the mean time, he helped me create a custom rule to check for the application and the definitions.
Since we did this it has been working fine. With both 4.1.3.1 and 4.1.3.2.
I'm swamped right now, but if I get some free time I'll try to post what we did (doubt it will be this week).
Chris

Similar Messages

  • Cisco NAC Clean access update

    Hi,
    I am trying to deploy nac but for updating the Clean access av/as update i am not able to get the updated signatures and update the NAM.
    is there any way i can force it manaually or wget and get the package for the same?
    Please help
    Thanks,

    Please have a look at the following link:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_admin.html#wp1078189
    On the CAM interface, you can export the current certificate and see its validity:
    Administration > Clean Access Manager >> SSL > X509 Certificate >> Select Cert and hit 'Export'
    Please rate if you find the input helpful
    Regards
    Farrukh

  • NAC clean access policy requirement

    we have Clean Access Manager Version: 4.1.2
    the policy is to check that the user has symantec antivirus on its machine , if not the NAC will redirect a link to the user to install the antivirus ,
    the main problem is that all the PCs joined the domain & all the user accounts have limited user privilege to install the antivirus , so is there any means in windows like creating a pakage , or istalling under DOS with using patch file or any other solution

    If you have a software distribution system you can normally run a local file on the PC that checks for requires software, in this case the symantic antivirus. The file then reports to the software distribution server and any missing applications become pushed down.
    Another thing you can do is create a script that will pull and install the application (with admin rights) from a server.

  • Problem with Clean Access Agent and Windows Updater

    I have a problem with a laptop when using Cisco Clean Access Agent. The agent keeps directing the laptop to get updates from the Windows Update site, but when I have connected the laptop via cable, windows updates tells me there are no updates either essential or optional. The laptop is a Sony VIVO VGN-FJ270 running XP Home Edition SP2 and the Clean Access Agent is version 4.0.2.1
    Any help is appreciated!!

    Verify the allowed hosts in CCA agent.
    Try these link:
    http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html
    http://www.cisco.com/en/US/products/ps6128/products_qanda_item09186a00803b7a81.shtml

  • Cisco Clean Access Update Website and Firewall Port Required

    Hi,
    I was wondering if anyone may know the website the clean access manager would be using to upate as well as the firewall port required. This is due to a firewall in place. Based on some reading, not sure if it uses other website besides the following http://www.perfigo.com/clean_machine_1/version-se.txt on port 80.
    Thanks.

    Hi,
    For CAM checks and rules update, that's the only site required.
    HTH,
    Faisal
    If you find this post helpful, please rate so others can find the answer easily

  • With version update 31.4.0 - the return receipt request and email send priority disappeared. How can I access them now? Thanks!

    With version update 31.4.0 - the return receipt request and email send priority disappeared.
    How can I access them now?
    Thanks!

    Did it? I find it in the bar under alternatives

  • Windows Vista conflicting with Clean Access?

    When I try to log into Clean Access to use the internet, it gives me an error message saying that in order to fulfill all of my requirements and get into the system, I need to download windows defender. But Windows defender comes with Windows Vista, which is what I have...So when I try to download Windows Defender and install it, it gives me a popup saying that I already have it on my comnputer and that I don't need to download it. Any ideas? Anybody? Please? Am I even in the right place for this kind of question?

    If you using Windows Vista,You already have windows defender. Ensure the version of the defender because if Windows Defender informed you that an update is available, you are running an older version.
    Below are Windows Vista Supported Antispyware Product as of the latest release of the Cisco Clean Access software.
    Product version - 1.x
    AS Checks Supported
    (Minimum Agent Version Needed) are:
    Installation - (4.0.5.0)
    Spyware Definition - (4.0.5.0)

  • Clean access rules and Windows service pack 3

    I am having a small issue with our Clean Access Manager blocking any Windows XP computer that has service pack 3 installed. The main failure it is giving in the reports is this
    Failed Checks:
    pc_Windows-XP-SP2, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion contains Service Pack 2]
    pc_Windows-XP-SP1, Registry Check [\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion contains Service Pack 1]
    The key that is there when sp3 is installed is this:
    \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion contains Service Pack 3
    I have verified that pc_Windows-XP-SP1 and pc_Windows-XP-SP2 are there as well as created a check for service pack 3 eric_pc_Windows-XP-SP3 and added the check to the rules governing windows updates for XP pro/home and windows media edition. But for some reason they are not taking effect. The CAM is running version 4.1.3.1 and the the CAA is version 4.1.3.2. Any assistance would be greatly appreciated.
    Thank you,
    Eric

    Here is the configuration guide for the Clean Access Manager which will help you :
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/m_instal.html

  • Can not access BIOS after update BIOS

    Can not access BIOS after update X220 BIOS to version 1.19
    Type: 4290-R32
    BIOS: 1.19
    http://download.lenovo.com/ibmdl/pub/pc/pccbbs/mobiles/8duj09uc.txt
    http://download.lenovo.com/ibmdl/pub/pc/pccbbs/mobiles/8duj09uc.iso
    Ask google and try anyway but not work
    - Press ThinkVantage, Press F1, Press Fn+F1
    - Power off, unplug AC, unplug battery, wait 15 miniute, try all again
    - Try to update BIOS again

    That is really weird.
    When you are in Windows, can you test and see if the F1 key is working? If it is working. Shut down the laptop then boot it back up. At the Thinkpad screen, keep spamming the F1 key and see if you are able to boot into BIOS.
    //JameZ
    Check out the Community Knowledge Base for hints and tips.
    Did someone help you today? Press the star on the left to thank them with a Kudo!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!
    X240 | 8GB RAM | 512GB Samsung SSD

  • Plse...help me on the communicating between CLEAN ACCESS MANAGER and Switch 3560E-24Ps by snmp

    Dear All,
    I try to configure in both Clean Access Manager and Switch 3560E-24Ps on SNMP Version 2 protocol but I can't make it working together (For CAM and Switch 3560G-48Ps I can do that). Plse give me any suggestion to solve that problem. All configuration is as below:

    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/412/cam/412_cam_book.html

  • Run-time error '7': Out of memory - Cisco Clean Access problem

    Hi all,
    I hope this question is in the appropriate place. I'm trying to use my company's vpn service. Here's how the process should work:
    1) Log on with username/password using Cisco AnyConnect VPN Client
    2) Log-in to the portal. During this step the Cisco Clean Access Agent is supposed to automatically log-in. However I get the following error:
    Run-time error '7':
    Out of memory
    My company's network services didn't seem to be much of a help so I was hoping one of you would have a good suggestion(s).
    Please keep in mind that I'm not great with computers. I know how to use them and all that but I'm not familiar with the inner-workings at all (registry editing etc.)
    Thanks in advance!
    -Bill

    I should add that the version of CCA is 4.1.10

  • Access denied after updating to Adobe reader 11.0.2

    Today I updated to the latest version of Adobe Reader. Afterwords I can no longer use it, it says access denied. I have trioed to remove and reinstall, without solving the problem. I have also checked my Flash Player, but it says that the latest version is already installed. What is this??? I need Adobe reader to work properly ASAP!
    My computer is a HP Pavilion dm1 Notebook and I have Windows 7 home premium installed. And Microsoft Windows.
    Regards,
    Liza

    Hi,
    The error message is: There was an error opening this document. Access denied.
    Both when I click directly on a pdf document in the files and when I try to open from inside the program.
    /Liza
    Från: AdityaKalania [email protected]
    Skickat: den 10 april 2013 00:04
    Till: FamForsberg
    Ämne: Access denied after updating to Adobe reader 11.0.2
    Re: Access denied after updating to Adobe reader 11.0.2
    created by AdityaKalania <http://forums.adobe.com/people/AdityaKalania>  in Adobe Reader - View the full discussion <http://forums.adobe.com/message/5220864#5220864

  • I cannot import any video into my  Lightroom 5.4 (last version updated) for MAC

    I cannot import any video into my  Lightroom 5.4
    (last version updated) for MAC
    in the beginnig it was  working, just after installation and update... now nomore...
    I use .mp4 files
    Already tried to use a new catalog, clean caches, and reinstalling
    the error says "was not able to import video files"
    thanks

    Arghhh! A big thank-you to hhps-photo, you just solved the myth bothering me for the last 2 months!
    I recently upgraded to Lightroom 5 from 4 and could not import any video. But when I downgrade to LR4 it worked again. I've tried so many other solutions suggested in the forum but none worked including cleaning cache, install divix plugin, install 32 bit version etc. Finally - it's because I blocked LR5 connecitons in my firewall !!!
    So simply allowed LR5 internet connection in my firewall settings and LR5 worked like a charm!
    Kevin

  • NAC/Clean Access Server no longer intercepting Clients after upgrade

    We recently upgraded our CISCO Clean Access Manager and Server to version 4.8.2 from 4.8.0.  Everything seemed to be working fine but I had a user log in without having the NAC Agent running and they had full access.  We didn't change anything other than upgrading to the new version.  We have found that the user has access even before the Windows Agent is completed with the assessement of the client.  It worked fine before the upgrade....Again, we made no changes other than upgrading to the new version (no route changes, etc).
    I even tried an explicit deny for the user's workstation's mac and the NAC SErver still let him through....I am a bit perplexed...Thanks for any assistance.

    Hmm, i removed the line but it does not help me ?
    I did run following command in terminal:
    sudo pico /Library/Server/Mail/Config/postfix/main.cf
    Removed the "reject_non_fqdn_helo_hostname" from the line smtpd_helo_restrictions.
    Saved the file and restarted Mail service
    get this in  log when i try to send from a windows client with Outlook2010:
    Aug 15 17:42:09 lundmark.jetoma.se log[236]: auth: Error: od(annicalundmark,192.168.20.103): Authentication server failed to complete the requested operation.
    Aug 15 17:42:09 lundmark.jetoma.se log[236]: auth: Error: od(annicalundmark,192.168.20.103): authentication failed for user=annicalundmark, method=DIGEST-MD5
    Have tryed different ports like 25 and 587 with SSL, TLS and "none" in SMTP advanced settings on klient.
    I did use the same instructions before in Lion server and there it did work ?!
    Any more ideas ?
    regards
    Jörgen

  • Clean Access Agent in Windows 8, 64 bit

    Hey guys,
    I posted this on another Cisco community site, someone there suggested I try here. He also gave me this page as a possible solution but I'm unable to download from the page as I don't have a service contract, I'm just a Dad trying to get his kid's computer online at school.
    http://www.cisco.com/cisco/software/release.html?mdfid=282855549&flowid=34712&softwareid=282573326&release=4.8.3&relind=AVAILABLE&rellifecycle=&reltype
    Kind of at our wit's end here. My daughter is at Mass Art in Boston with a nearly new computer (6 months old at most) with Windows 8 Pro and the Clean Access Agent isn't letting her connect saying she has no updated AV installed. However, we did have BitDefender installed and updated and I've seen BitDefender on a Cisco list on line somewhere, the tech department at the school also said that it should work. Thinking there might be a conflict with BitDefender and Windows Defender we uninstalled BitDefender but to no avail, the agent still won't allow access.
    Now the tech dept. at the school is telling her she has to reformat her hard drive (Ha!!) which is simply and completely unacceptable.
    Does anyone here know if the above link may solve our problem?
    Can someone send me the necessary files?
    Is there someone the school tech people can contact for this?
    Am I asking enough annoying questions?
    Many thanks for your time,
    Ken

    Hello Ajay,
    When I try to download either the "4.8.3 Patch for Windows 8 support" or the "4.8.3 Patch for Windows 8 Official support" it says I need a service contract. Which, of course, I don't have. I'm just a Dad trying to get his kids computer connected to the school's network!
    Do you know what the difference is between the "4.8.3 Patch for Windows 8 support" and the "4.8.3 Patch for Windows 8 Official support" downloads?
    Might you be able to email me what I need to [email protected]?
    I don't know how all of this works between the school and Cisco but if you can't send it to me might it be something the tech support people at the school can download? I would have to guess they do, indeed, have a service contract.
    Thanks again,
    Ken

Maybe you are looking for

  • Frequent FF crashes when clicking on a bookmark in the sidebar

    Running Win7 64bit, Firefox 3.6, but this problem existed for me in earlier versions of FF also. When I click on a bookmark in sidebar view, I will experience frequent FF crashes. When I re-open FF, the sidebar view is gone. I don't experience these

  • Javax Activation error, pls help me very urgent

    Hello, I am calling a java stored procedure, but I am getting the following error: javax.activation.UnsupportedDataTypeException: no object DCH for MIME type multipart/mixed; boundary="----=_Part_0_-1403249095.1105388630390" I dropped the jar files f

  • How to add a user defined constructor to an existing type?

    Hi, I want to alter an existing type (ORDSys.ORDVideo), where I do not have the source code of the type body. There is only a wrapped version, where I don't know, how to alter it. Because the existing functions use the constructor of the original typ

  • How to Configure two standalone Server to access with eachother

    Hi All, I have two stand alone Servers (SQL 2000) configured in two PCs in different locations (Location A & Location B) . I want to access Location A database from Location B Viz-Versa.  1. I have a STATIC IP provided by ISP and I m using a router (

  • Problems with Adobe Flash

    My DEP closes the adobe flashplayer.  It won't allow me to exclude it either.  Can't view videos, movies, etc. What can I do?