The user logs into the web login page and is redirected to the Agent Download page (Figure 10-3) for the one-time download of the Cisco NAC Agent installation file. Figure 10-3 Cisco NAC Agent Download Page. The user clicks the Launch Cisco NAC Windows Agent Installer button (the button displays the version of the Agent being downloaded). Free cisco nac agent 64 bit download. Internet & Network tools downloads - Cisco NAC Agent by Cisco Systems, Inc. And many more programs are available for instant and free download. Mac OS X Cisco NAC Agent Overview. The Mac OS X Cisco NAC Agent provides local-machine Agent-based posture assessment and remediation for client machines. Users download and install the Agent (read-only client software), which can check the host registry, processes, applications, and services.
ContentsIntroduction
This document describes how to configure Mac OS X Clean Access Agent posture assessment via the Network Admission Control (NAC) Manager web console for release 4.5.
Mac posture assessment in this release is limited to AV/AS support only. Refer to the Cisco NAC Appliance (Clean Access) Release Notes for the list of AV/AS that are supported on Mac OSX.
PrerequisitesRequirements
Complete these steps before you attempt this configuration:
This document assumes you are running Cisco NAC Appliance Release 4.5 and that you have completed the following steps according to the guidelines in the Cisco NAC Appliance – Clean Access Manager Installation and Configuration Guide, Release 4.5:
Note: Please refer to the MAC OS X Agent restrictions section for OS X versions and AV/AS Products and Requirement Types that are supported for Mac posture assessment.
Components Used
The information in this document is based on the Cisco NAC Release 4.5.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Conventions
Refer to the Cisco Technical Tips Conventions for more information on document conventions.
Mac Posture Assessment with Clam AntiVirus (ClamAV)
The goal of this procedure is to verify that ClamAV 1.1.0 is installed and updated with the latest virus definitions on the client machine.
If ClamAV 1.1.0 is not installed on the client machine, you must provide the user with a link to the ClamAV website in order to download and install the software. Next, you must verify that ClamAV is updated with the latest definitions. If not, the Clean Access agent can communicate with Clam AV through an API call (with the AV Update requirement type) and request ClamAV to update itself.
Note: As of Cisco NAC 4.5 release, the AV Update requirement type is supported only with ClamWin AV. For all other AV/AS, a Link Distribution or Local Check type of requirement can be configured to remediate users if their virus definitions are not updated.
Step 1. Configure a Rule to Check if ClamAV is Installed
The new AV rule is added to the bottom of the Rule List.
Step 2. Configure a Requirement to Remediate Users if ClamAV is not Installed
https://dynamicyellow748.weebly.com/blog/radioshack-wireless-keyboard-drivers-download-mac. If the Clean Access Agent detects that ClamAV 1.1.0 is not installed on the client machine, it quarantines the user. At this point, you can configure a Link Distribution requirement type in order to provide the user with a link to download ClamAV 1.1.0.
The new requirement is added to the Requirement List.
Step 3. Map the Link Distribution Requirement with the AV Installation Rule
Step 4. Configure a Rule to Check if ClamAV is Updated
The new AV rule is added to the bottom of the Rule List.
Step 5. Configure a Requirement to Remediate Users if ClamAV is not Updated
If the Clean Access Agent detects that ClamAV 1.1.0 is not updated on the client machine, it quarantines the user. At this point, the user is provided with an Update button in order to remediate.
https://dynamicyellow748.weebly.com/blog/adobe-audition-cc-2014-mac-download. Once the user clicks the Update button, the Clean Access agent communicates with the underlying ClamAV software and asks ClamAV to update itself.
You can configure an AV Definition Update requirement type in order to implement this functionality.
The new requirement is added to the Requirement List.
Step 6. Map the AV Definition Update Requirement with the Virus Definition Rule
Step 7. Map the Requirements to Roles
At this point, you can link the posture requirements (which have been mapped to rules) to the role in which the end user is placed.
Step 8. Allow Access to the Remediation Site in Temporary Role
Once users are found to be non-compliant, they are quarantined and placed in the temporary role. At this point, the users must be able to reach the remediation resources (AV server, websites, patch servers, etc.) so that they can remediate themselves.
For this purpose, you must open appropriate access in the Temporary Role. In this example, the users must be able to reach http://www.clamxav.com for both the requirements (installation and virus definition update).
Cisco Nac Agent 4.9.5.10Verify the End User ExperienceDownload Cisco Nac Agent Mac Os 10.13
Use this section to confirm that your configuration works properly.
This Mac posture verification scenario assumes that your initial NAC setup (NAC Manager and Server) is complete and that the NAC Server is reachable from the client machines. Cisco Clean Access Agent 4.5.0.0 should be installed on the Mac that runs OSX 10.4 or higher. This scenario assumes that the Mac does not have ClamAV installed prior to this test.
Troubleshoot
There is currently no specific troubleshooting information available for this configuration.
Cisco Nac Agent DownloadRelated InformationComments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2020
Categories |