NAC - upgrade agent

Hello,
Can I upgrade NAC agent for switchs cisco 2950 and 3560 to 4.9.4.3 without upgrading the CAM without any problems ?
the NAC version is 4.5.1.0
Big thanks in advance!
ILIAS

You can directly download the nac agent 4.9.4.3 from the below download link
http://software.cisco.com/download/release.html?mdfid=283801620&softwareid=283802505&release=1.2&flowid=26081

Similar Messages

Cisco NAC Web Agent + Windows 8

Hello,
I´m implementing a Cisco ISE 1.2 and I am having troubles with NAC Web Agent and Windows 8 compatibility.
All time that I try install NAC Web Agent in Windows 8, I get the message "Agent User Operating System is Not Supported".
Follow are some informations about my Environment:
ISE 1.2 Patch 3
OS: Windows 8 Enterprise
IE: 10 (In Desktop Mode w and w/o Compatibility View)
NAC Web Agent: 4.9.0.1007
Could you help me ?
Best Regards,
Daniel Stefani

Hi Charles,
I can download all this files, but I can’t import it in ISE Resourses.
NAC Agent MST files
nacagentsetup-mst-4.9.3.9.zip
NAC Agent MSI Installation file
nacagentsetup-win-4.9.3.9.msi
NAC Agent Installation Package
nacagentsetup-win-4.9.3.9.tar.gz
Mac Agent Installation Package for MacOSX
CCAAgentMacOSX-4.9.3.803.tar.gz
NAC Agent MST files
nacagentsetup-mst-4.9.3.5.zip
NAC Agent MSI Installation file
nacagentsetup-win-4.9.3.5.msi
NAC Agent Installation Package
nacagentsetup-win-4.9.3.5.tar.gz
In this link that you sent me doesn’t have options to Cisco NAC Web Agent.
But in the follow yes…
http://software.cisco.com/download/release.html?mdfid=283801620&flowid=26081&softwareid=283802505&release=1.2&relind=AVAILABLE&rellifecycle=&reltype=latest
Best Regards,
Daniel Stefani

NAC web agent question

Hi,
I need to know when can i use the NAC web agent??? is it used for guests or visitors only????
If i used NAC web agent for guests , can i perform posture assessment for the guest users ( i mean check windows update , AV/AS or certain services)?? or network scanning will be only applied to the guests who are using NAC web agent????
i read the userguide of 4.7.1 of CAM and CAS but i have some conflicts regarding the above topic , so please i need your help.
Mohamed

Mohamed,
You can use it for any kind of users (guest/regular) and can do posture assessment, but no remediation. Remediation requires the full agent. The other limitation is that the web agent is only valid on Windows machines and cannot run on Mac/Linux etc.
HTH,
Faisal

NAC Cisco Agent cannot connect to LAN (Requirement Mandatory SCCM 2012 agent installed - ccmexec services)

hi Support,
we have a problem, our NAC Cisco Agent cannot detect SCCM Agent Service (ccmexec). here the snapshot:
the configuration as following:
here the NAC Cisco Agent Logs, download here:
https://drive.google.com/file/d/0B9ShGyy3UzoeejlvZ2MwVVo2V1U/edit?usp=sharing
Whether the NAC 4.8 support integration with SCCM 2012?
Thanks
Endrik

Wow, no responses?
Was I too long winded?

Upgrade agents from OEM 10.2.0.5 from 12c not using Upgrade Console

Hi,
As we have to upgrade more than 100 agents from OEM 10.2.0.5 to OEM 12.1.0.3, don't have oracle account passwords (OEM 10g agents are runing as the oracle accout), and PAM authentification is not working for our environnement (SR open) we want to know if there is a workaround for upgrading agents and not using the upgrade console.
Regards,
Nicolas

Hi, the response from the support is upgrading all our agents to 11g and then upgrading to 12c it seems a bit complicated isn't it (more than 100 agents to migrate) ?
And as the migrate from 10g to 12c is nothing more than many automated actions I can believe that it can't be done manualy (just the install and configure agants).
Regards,
Nicolas

Use NAC Web Agent login with Ipad

Hello Guys,
I'm using NAC 4.8, and I'd like to login using NAC Web Agent on Ipad.
When I'm trying to do that, I'm receiving a message on Ipad that I need to install Java Plug-In, but there is no JavaPlug-in available for Ipad.
Does anyone know if there is any aditional configuration that I have to do on NAC Manager to be able to access the network using NAC Web Login on Ipad ?
Best Regards

Hi Luciano,
Unfortunately, the NAC Web Agent and the persistant Agent are not supported for the iPad operating system. (It is called iOS). The following table documents this fact under footnote 3:
http://www.cisco.com/en/US/docs/security/nac/appliance/support_guide/agntsprt.html#wp125630
Only normal Web Login with Safari browser is enabled.
Hope this helps.
-Shrikant
P.S.: Please mark this question as answered if it has been resolved. Do rate helpful posts. Thanks.

Cisco NAC web agent failure

Is there a list somewhere that shows what the status's mean? I have a few users getting this error, while others are working fine -
Failed to download Cisco NAC Web Agent ( status = -2 ) !
Thanks!

For the web agent, there are three error states
-1 means that it was unable to launch the control at all,
-2 means it failed to download the agent executable,
-3 means there was an error running the web agent
Are you using the Java or ActiveX version of the web agent? Definitely check the browser settings for both and make sure that it's either allowing or prompting the user for the applets. If you're using the ActiveX version, you could try forcing the Java version, as most users seem to have more lenient browser settings by default for it.

NAC CAM - Agent upgrade URLs

Does anyone knows from where (URLs) the CAM downloads the agents upgrades? There is no info about that in Cisco documentation.
I need to allow the URLs in a proxy ....
Thanks in advance.

Mohamed,
You can use it for any kind of users (guest/regular) and can do posture assessment, but no remediation. Remediation requires the full agent. The other limitation is that the web agent is only valid on Windows machines and cannot run on Mac/Linux etc.
HTH,
Faisal

NAC upgrade 4.6.1 to 4.7.2

Hi,
I have a problem with upgrade CAS 4.6.2 to 4.7.2.
When I unpacking cca_upgrade-4.7.2-from-4.5.x-4.6.x.tar.gz and started ./UPGRADE.sh, I get message on console:
Checking for a free partition to use for upgrade
Found free partition to use at /dev/sda3
Free partition size is 2040255 kb
Free partition lies outside the boundaries of partition 4 in new layout
Free partition cannot be used for upgrade image safely
Exiting
(Cisco NAC appliance 3310 | server)
Regards
Alexandro Cher

Faisal, thanx a lot for the reply.
File cca_upgrade... it's ok!
Upgraded CAM is fine.
CAS.....problem.
Best regards
Alexandro

Question re upgrading agents to 12cR3

Hopefully I can ask this question clearly.
I upgraded my OEM installation from 12cR1 to 12cR3 and have also successfully upgraded most of the agents. My question -
The Agent Upgrade console shows a couple of agents which are not upgradable because the latest agent software is missing. They are Oracle Solaris on SPARC (64-bit) and the agent version is 12.1.0.1. The remedy is to go to the Self Update Screen. When I get there under Agent Software I see that the Oracle Solaris on SPARC (64-bit) is there with a status of applied. I believe I must download the 12.1.0.3 agent, is that correct?
When I choose the Oracle Solaris on SPARC (64-bit) the download button is greyed out so I do not have the option of downloading it. Must I first remove it in order to download the 12.1.0.3 agent? If I must do that is there anything I must be wary of or are there ramifications?
Thank you.
Bill Wagman

Hi Bill,
I have no idea why the download button would be greyed out, but I do know from experience that when you download updated agent software you do not need to do anything with the old software first -- that is, having the 12.1.0.1 agent sitting there in "Applied" status is normal and correct and shouldn't be causing you problems.
Is there any chance your software library is full? That's the only reason I can think of that the download button would be unavailable.
One thing to try might be to toggle OEM to offline mode for MOS, then return to self update and see if the download button is available. If it is, it should give you a link you can use to download the software manually along with instructions on how to import it to OEM using emcli. If that doesn't work, toggle back to MOS online mode and check the download button again.
-Brian

Upgrade agent using agentDownload.solaris -u

Hello,
Has anyone being able to upgrade the OEM agent from version 10.2.0.1.0 to 10.2.0.2.0
using agentDownload.solaris script and the -u option?
OMS version is 10.2.0.1.0
The command I ran was
./agentDownload.solaris -b $AGENT_HOME -o $OLD_AGENT_HOME -u
./agentDownload.solaris -b /opt/oracle/10Agent -o /opt/oracle/10Agent -u
Then it fails at
Initializing Java Virtual Machine from /tmp/OraInstall2007-05-28_09-47-38PM/jre/1.4.2/bin/java. Please wait...
Completed with Status=255
I have used the agentDownload script to install 10.2.0.1.0 in the past.

You need to apply the 10202 agent patch on 10202 agent oh
-u option use if u want to upgrade 10.1.0.X-->10.2.0.X

Cisco NAC web agent Network Security Policy

I have a computer with an installed McAfee Antivirus that us up to date. However, each time try to access one of my client's server via VPN, I successfully connect to VPN using Cisco Anyconnnect but whenever I try to download the web agent and the device security check is being run, I get the feedback "Host is not compliant with network security policy". It also tells me a Remediation description of "please update your antivirus". (see attached screenshot)
Please note that I already have my McAfee antivirus updated and I have done everything to keep my computer in good shape in terms of security.
What is the possible cause for this?

That means the CAM hasn't received an SNMP trap for that MAC address. Double-check that the WLC is set up to send traps to the CAM: http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/47/cam/m_woob.html#wp1290626
You can see if the CAM's received a trap for a specific MAC by looking under OOB Management > Devices > Discovered Clients.

Decrypting NAC appliance agent event logs

Talking about the Mac NAC agent the CAM config guide says...
'The Log file (~/Library/Application Support/Cisco Systems/CCAAgent/event.log) is encrypted. The user must use the decryption tool on Windows to see the log in clear text.'
Does any one know what decryption tool they are talking about.

I was told by TAC that logs are encrypted to prevent shared secrets and the like being taken and ONLY TAC persons have the decrypter. I have no idea if that applies here or is even necessarily true, but it's what I was told. So I would contact TAC and upload the log.

Upgrade agent?

Hi experts,
I have problems with OEM, every day, appear the agent like "agent unreachable" and I have not information in OEM.
When try to know what happend, I go to "emctl status agent" and appear the error:
Collection Status : Disabled by Upload Manager
when I try to "emctl upload agent", appear the error:
.... disk full
Teh disk is not full and it has more than 50% free,
So, I need to recreate the repository again.
Some strange is:
My Oracle version is 11.2.0.3, why the Agent, OMS and Procotol appear with 10.2.0.4.4? Could be a problem? how can upgrade it?
Thanks in advance,
Regards,

Hi Victor,
OEM is delivered with Oracle, but you need to install and configure it to use.
As you must have upgrade from 10g to 11g, and OEM was configured before the upgrade, so you are getting old version of it.
You need to check the package delivered for OEM and may have to re-install and configure for version 11.
http://docs.oracle.com/cd/E11857_01/install.111/e15838/upgrade_em.htm#CHDEJGAH
Oracle Enterprise Manager Documentation</title><meta name="Title" content="Oracle Enterprise Man…
As, i have installed and configure this long ago on 10g, I can't really say about 11g.
Regards,

Upgrade Agent to 11g to run on 10.2.05 repository

Hello.
I want to upgrade our 10.2.0.5 agent to 11.1.0.1.0 and have confirmed that this is supported via Certifications on Metalink.
Does anyone have experience of this procedure?
Regards,
DA.

Steps for the upgrade are thus:
Upgrade Procedure, as per Upgrading Oracle Management Agent Using a Response File from Oracle® Enterprise Manager Grid Control Advanced Installation and
Configuration Guide
11g Release 1 (11.1.0.1.0)
Part Number E16847-10
http://download.oracle.com/docs/cd/E11857_01/install.111/e16847/upgrade_agent_usng_rsp.htm#CEGIDJFC
To upgrade an existing Management Agent using a response file, follow these steps:
1.
Backup Agent Home and set Registration Password.
Backup the exisiting Agent Home
cp -R /oraoem/agent10g /oraoem/pre_upgrade_agent10g
set a Registration Password in Grid Control
In oraoem’s bash shell, set an environment variable for $AGENT_INSTALL_PASSWORD
2.
Prepare Response File.
Navigate to and edit the response file upgrade_agent.rsp as described here:
edit rsp file, as per Oracle doc, and set 2 values:
OLD_BASE_DIR
If you have the default name for the Oracle home of your existing Management Agent, that is, agent10g, then specify the path to the old installation base
directory where the Management Agent to be upgraded is residing.
For example, if the Management Agent is residing in /john/OracleHomes/10.2/agent10g, then specify only /john/OracleHomes/10.2/
ORACLE_AGENT_HOME_LOCATION
Specify the location where the Oracle home of the Management Agent (agent11g) can be created.
Therefore:
The old installation base directory where the Management Agent to be upgraded is residing =
OLD_BASE_DIR = /oraoem
ORACLE_AGENT_HOME_LOCATION = /oraoem/agent10g
3.
Stop the Agent and Invoke installation.
Stop the Management Agent you want to upgrade.
as oraoem emctl stop agent
Invoke the installer:
If you have the default name for the Oracle home of your existing Management Agent, that is, agent10g, then: run the following command:
./runInstaller -silent -responseFile /<path to upgrade_agent.rsp>
4.
Post upgrade tasks.
After you upgrade verify the installation:
emctl status agent
Run the following command to see a message that confirms that EMD upload completed successfully:
$<ORACLE_HOME>/bin/emctl upload
manually run the root.sh script as a root user from the Oracle home of the Management Agent:
as oraoem stop the agent
emctl stop agent
as root run the root.sh
<Oracle_Home>/root.sh
start agent
emctl start agent
DA

NAC - upgrade agent

Similar Messages

Maybe you are looking for