Installation
Usage
Troubleshooting Guide
What is the Cisco Clean Access Agent?
The Cisco Clean Access agent is a solution provided by Cisco, Inc. that performs network validation. The software performs the following functions:
- Authentication to the network
- Validate whether your computer meets the minimum security standards
- Quarantines your computer until it meets the minimum security standards
- Provides access to the remediation sites, such as downloading Windows update patches
- Once your computer is validated as “clean,” allows access to the network
back to top
Why are we introducing this solution now?
Student computers may potentially contain harmful viruses and malware. Worms and viruses can spread to other unpatched/vulnerable computers. ITS determined that the best way to prevent this from occurring is to insure that Operating System critical updates, AntiVirus software are current and maintained.
back to top
How does Validation work?
When you open any Internet browser, such as Internet Explorer or Mozilla Firefox, to any Internet website then you will be redirected to a page that instructs you to log in and download Cisco Clean Access agent. Once the agent, or program, is installed, the agent downloads the validation rules and verifies your computer is compliant with the rules. If your computer fails the test then you will be told the reason(s) and how you can correct the problems.
back to top
How do I install the Cisco Clean Access Agent?
The Cisco Clean Access Agent is easy to install. You will need to open your web browser and go to any web site which will be redirected to the Cisco Clean Access website. You will be given the option to download the Cisco Clean Access agent. After the download is complete, double-click on the file to begin the installation process. You will be asked to click on “NEXT” several times in order to proceed through the installation process. Once installation is completed, the Agent will start up and ask you to log in.
back to top
Will this work for Windows 95/98/ME/2000?
The University no longer supports Windows 95/98/ME/2000. We recommend that you upgrade to Microsoft Windows XP. In some cases, this may mean upgrading or replacing your computer as well. If you are not sure whether your current computer can run Windows XP, bring it to ITS and we will advise you.
back to top
What if I have a Linux computer?
If you use a Linux computer, you will not be asked to download or install the Cisco Clean Access Agent. However, you will be required to log in with their Bison login through the Gallaudet Cisco Clean Access website. We recommend that all users, regardless of their computer and operating system, install applicable security updates, use a firewall, and run current antivirus software on their computers.
back to top
What if I have a Macintosh computer?
If you use a Macintosh computer, you will be asked to download or install the Cisco Clean Access Agent (instruction).
back to top
back to top
What if I use a Sony PlayStation or a Microsoft Xbox to connect to the Internet?
If you connect to the Internet using PlayStation or Xbox, please contact Information Technology Services (ITS) at infotech.services@gallaudet.edu for further instructions.
back to top
What if I have a wireless laptop (or connect wirelessly)?
If you connect to the Gallaudet network wirelessly, you will not be asked to download or install the Cisco Clean Access Agent. You still will be required to login with your Bison Login.
back to top
Where can I get Windows Updates?
Windows Updates can be downloaded from the Windows Update website. You must access the Microsoft website using Microsoft Internet Explorer – you cannot download Windows Updates if you are using any other browser, such as Mozilla Firefox, Netscape, Opera, etc.
Where can I get Symantec AntiVirus?
Symantec AntiVirus software can be downloaded from the Gallaudet software website at http://its.gallaudet.edu/software. You will be asked to enter your Bison login and password to verify that you are a member of the Gallaudet community. If you have problems logging in, please go to the common log-in problems page. There is no charge for Symantec AntiVirus!
back to top
What else do I need to install besides the Cisco Clean Access Agent?
You must enable "Automatic Updates" for your Windows XP computers and install all critical patches. Cisco Clean Access Agent ensures that computers have Gallaudet-provided Symantec AntiVirus installed. You should set Symantec AntiVirus to run LiveUpdate regularly. Please note that the current version of Cisco Clean Access system supports only Symantec Client Security versions 2.0 and earlier.
back to top
I’m moving off campus. How do I uninstall Cisco Clean Access Agent?
Please note that you do not have to uninstall Cisco Clean Access Agent. If you wish to do so, however, the process is quite simple. Open Control Panel by clicking on Add/Remove Programs, selecting Cisco Clean Access Agent, and clicking on Remove.
back to top
How do I log on to the Network?
When the Cisco Clean Access Agent runs, it will ask you for your Bison login and password. Use this to log onto the network.
back to top
I forgot my password. How can I reset it?
You can go to CampusWeb to reset or change your password.
back to top
How do I know if I’m logged on or not?
If you try to open a web page and it does not connect, then chances are that you are not connected. Just open the Cisco Clean Access Agent again and log on.
back to top
What does it mean if I’m quarantined, and how do I get out of being quarantined?
If you are quarantined, it means that your computer does not meet the minimum requirements to log onto the network. The Cisco Clean Access Agent should give you a list of software and patches that need to be installed on your computer before you can connect to the network. Run Windows Update to fully patch your computer and run Symantec LiveUpdate on Symantec Anti-Virus to have the latest virus protection. Once you have fully updated and restarted your computer, try logging on again to regain access to the Internet.
back to top
Why do I keep getting logged off?
You will be required to log into the system periodically to ensure that your system continues to meet all requirements. If you unplug or turn off your computer, you may be asked to log on again when your computer comes back online.
back to top
How often will I be revalidated?
The validation timer lasts for seven days. After seven days your computer will need to go through the validation process again.
back to top
What sites can I access while being quarantined or when I’m not logged on?
If you are not logged on or quarantined, you only will be able to access Windows Update, Symantec LiveUpdate, and the Gallaudet Cisco Clean Access website.
back to top
Does Cisco Clean Access Agent protect against spyware?
Cisco Clean Access Agent does not protect against spyware. For spyware protection, we recommend that you download Lavasoft Ad-Aware and/or Spybot: Search & Destroy. Both pieces of software are freeware, and can be downloaded from http://www.download.com.
back to top
Will Clean Access Agent monitor anything that I do online?
No. The Cisco Clean Access Agent will only make sure that your Microsoft Windows operating system is fully patched and set to automatically download and install updates, and that Symantec AntiVirus is installed and updated; Cisco Clean Access Agent will not monitor or report your software usage or Internet activity.
back to top
Will my computer still work when I connect to my home network?
Yes. Cisco Clean Access Agent is only active while your computer is connected to the Gallaudet network. If you connect your computer to a different network, the Agent will just lie dormant and will not interfere with your ability to connect to the Internet.
back to top
Will Cisco Clean Access Agent change any settings on my computer?
The Cisco Clean Access Agent is an unobtrusive program that communicates exclusively with the Cisco Clean Access servers to ensure that your computer is protected from malicious software. The Cisco Clean Access Agent will not alter any settings on your computer, and should not interfere with normal functionality.
back to top
What happens if my computer becomes infected?
If your computer becomes infected then you will lose network connectivity and you will need to bring your computer to EMG B-09 for repairs. The Cisco Clean Access agent cannot prevent all infections.
back to top
I cannot access the login page. When I open a browser I am redirected but my browser gives an error
This is generally caused by an encryption (SSL) problem with your browser. Encryption is required for authentication to complete. Try another browser and try rebooting your computer to see if the problem goes away.
back to top
Should I be concerned if I can't ping the gateway address?
No. This is normal. You will not be able to ping your gateway address.
back to top
What am I allowed to access if I have not authenticated with Cisco Clean Access or if my computer failed the Clean Access tests?
You will be able to access the following Gallaudet web sites:
You will be able to access the following companies to update your computer:
back to top
I am using a Linux computer and I have opened my browser but I don't see a login page?
You must go to an Internet web site such as Google to see the login page.
back to top
What does the Cisco Clean Access Agent look like in the System Tray?
On the bottom right of your Windows computer you should see the following icon: 
.
back to top
I am not able to access the Internet but the Clean Access Agent allows me to "logout"
The Clean Access Agent may not always be able to detect your network status. Either try rebooting your computer or right-click on the Cisco Clean Access Agent in your system tray and select "logout" and then select "login".
back to top
How do I log out?
Right-click on the Cisco Clean Access Agent in your system tray and choose "logout".
back to top
I do not show a "log out" option in the Clean Access Agent.
The Clean Access Agent may not always be able to detect your network status. Once you login through Clean Access Agent, you will have a "logout" feature.
back to top
Can I update Windows or AntiVirus before I login?
Yes. Please see the above question about which web sites you are allowed to access without authentication.
back to top
I ran Windows Update and I got a message stating the product key is invalid.
Windows Update will fail if your Windows Operating System is not properly licensed. You must have a legal copy of the operating system to connect to the Gallaudet network. Please contact Microsoft or your computer manufacturer with questions.
back to top
I keep trying to install the Cisco Clean Access Agent but it tells me that I can either Modify/Repair or Remove the program.
back to top
How do I know if Clean Access Agent is running?
Look for the Cisco Clean Access Agent in your system tray. The picture of the agent is listed above.
back to top
I do not see the Clean Access Agent icon in my system tray.
There are a few possibilities.
- Cisco Clean Access Agent is not installed
Please install the Cisco Clean Access Agent to continue.
- Cisco Clean Access Agent has been installed but you did not select "Launch" at the end of the installation.
Select the following to run the Clean Access Agent: Start Menu -> Programs -> Cisco -> Clean Access Agent. Click on Clean Access Agent to run the program.
- Cisco Clean Access Agent is hidden in the system tray.
On the bottom right, click on “<<“ to expand the system tray list.
- Your computer has a problem showing System Tray icons.
You may be able to use "Task Manager" to halt Clean Access Agent and then launch it again. To run the Task Manager, Start -> Run. Type taskmgr and click OK. Look for CCAAgent.exe, click on it and then select End Task. Restart Cisco Clean Access Agent. Follow the next step to start the program.
- Cisco Clean Access Agent is not running.
Select the following to run the Clean Access Agent: Start Menu -> Programs -> Cisco -> Clean Access Agent. Click on Clean Access Agent to run the program.
back to top
