Skip to main content

Posts

NAC Updates

Windows Clean Access Agent Version 4.1.7 Released - Sept 30th In this release their are a few minor resolved caveats: - Symantec AntiVirus 10.x not fully compatible with CCA Agent - V ista Agent does not detect MAC Address of Wireless NIC - AVG Anti-Virus Free 8.x support for Virus Definition check As with all upgrades, it is highly recommended to read the release notes before upgrading. Also, on a side note, remember that upgrades should be done for a purpose, either to fix a caveat or to gain new features. Download 4.1.7 Windows Agent Release Notes 3 NEW Configuration Examples posted to CCO - NAC Appliance (CCA): Configure High Availability (HA) for the Clean Access Manager (CAM) 29/Sep/2008 - Deploy NAC Profiler in an Existing Out-of-Band NAC 02/Sep/2008 - Importing SSL Certificates to NAC Profiler 02/Sep/2008 To see all the previous Configuration Examples and TechNotes How to Block Operating Systems with CCA A friend of mine, Rob Chee, writes a blog on network security and had a...

NEW NAC Version 4.1(6)

4.1.6 is available and you can download it here: Cisco NAC Appliance Software Download Page Requires a valid Smartnet contract in order to download 4.1(6) Release Notes As with all NAC Upgrades, the release notes are extremely important! 4.1(6) CAM Installation & Configuration Guide 4.1(6) CAS Installation & Configuration Guide

Ask the Expert - Cisco NAC Guest Server

Click Here to Begin This is a great forum to ask your NAC Guest Server questions. Syed is apart of the stellar NAC business unit and focuses on Guest Server. Please read the detailed description below: This is an opportunity to get an update on the new Cisco NAC Guest Server which works with either Cisco NAC Appliance or Cisco wireless LAN controllers to manage the entire lifecycle of guest access with Cisco expert Syed Ghayur. Syed is a technical marketing engineer in the product marketing team for the Cisco Network Access Control (NAC) Appliance. He also works on global scalability of the product, documentation, partner training, and system engineer trainings. In addition, he works closely with the Cisco Technical Assistance Center (TAC) to resolve complex issues and product related bugs. Early this year, he joined the Security Technology Group (STG) as technical marketing engineer for NAC Appliance. Remember to use the rating system to let Syed know if you have received an adequate ...

NAC Manager (CAM) Backups

Background: The Cisco NAC Manager is the brain of the Cisco NAC solution. All configuration is stored in a database which makes the solution scalable. With that said, a crucial step in any deployment is developing a backup plan to ensure that if the NAC Manager or Failover Pair fails(Hardware failure, database corruption, administrator configuration mistake, fire, flood, sinkhole, etc.) the database can be restored and everything will be back up and working! What gets backed up: Everything that is stored in the database gets backed up. The following is a list of items that get backed up: o Clean Access Server Configuration information (DHCP, Managed Subnets, VLAN Mapping, Static Routes, filters, etc.) o Filters (Device Filters, Subnet Filters) o Posture Assessment (Checks, Rules, Requirements,etc) o Switch Management o User Management (User Roles, Auth Servers, User Pages, Admin Users) o Reports o Licenses What doesn't get backed up: The less talked ...

Cisco NAC Guest Server 1.1.1

On June 9th, Cisco posted an update to NAC Guest Server. Version 1.1.1 comes with a few new features: Guest Role Support Guest Role Support provides the ability for Sponsors to create guest accounts with different privileges. This includes provisioning into different roles on the Clean Access Manager, returning different RADIUS attributes to RADIUS clients or only allowing access from specified networks. Additional NTP Server The 1.1.1 release introduces the ability to configure two NTP servers instead of a single NTP server in 1.1.0. FTP Backup Directory The 1.1.1 release allows a directory to be specified as part of the scheduled FTP backup, prior versions placed the backup in the default directory of the FTP user account. As with all NAC related upgrades make sure to read the RELEASE NOTES before upgrading ! The NAC Guest Server Installation & Configuration Guide 1.1.1 can be used for reference of the new features. Finally to download the new version go to the NAC Guest Serve...

New Configuration Examples

Cisco posted two new Configuration Guides: NAC: LDAP over SSL on the Clean Access Manager (CAM) This example will walk you through using SSL with your LDAP Auth Server. NAC: LDAP Integration with ACS Configuration Example This example will explain how to use Cisco NAC Profiler for MAC Auth Bypass(MAB) for 802.1X deployments. To see all the previous Configuration Examples and TechNotes