Cisco Clean Access
From CTOWiki
Contents |
General Overview
Washington State University has implemented a network admission system called Cisco Clean Access (CCA) that affects all computers connected to WSU's ResNet. This system aims to reduce the number of viruses on the WSU Network by restricting the internet access of computers until they are properly protected. Malicious software such as viruses and worms can cause data loss, data theft, and can render a computer unusable. Cisco Clean Access ensures that computers connected to the network are protected, providing all users with a safer, more secure, and reliable network.
To use Cisco Clean Access, Windows users must install the Clean Access Agent software on their computers. The Clean Access Agent ensures that each computer has all necessary [Operating System] updates, automatic updates enabled, and sufficient antivirus software installed. If the computer fails to meet one or more of these requirements, the Clean Access Agent helps the user acquire and install all necessary components. Computers are granted full access to the network after they have been fully updated and protected.
Logging In
Logging in to the Cisco Clean Access system requires your Network ID and password. If you are having problems with these, you can visit the tutorial Resolving issues with my Network ID.
Windows
Computers running Microsoft Windows are required to install the Cisco Clean Access Agent. A tutorial is available at Getting connected with MS Windows.
Supported Applications
Versions of Windows:
- Microsoft Windows XP, including XP Pro, Home, Tablet, and Media Center Edition
- Microsoft Windows 2003
- Microsoft Windows 2000
- Windows Vista
Antivirus Applications:
- Symantec Antivirus, which is provided free to all current WSU Students
- Norton Antivirus products
- MacAfee antivirus products
- Trend Micro antivirus products, except for VirusBlaster 7.3, PC-cillin Internet Security 2005, PC-cillin Internet Security 2006, and OfficeScan Client (see note below)
Unsupported Applications
- Any version of Microsoft Windows below 2000, including 95/98/ME
- VirusBaster Corporate Edition 7.3, the Japanese version of Trend Micro. - There is an issue with this version and CCA 4.0.5.0, as discussed in Cisco's Open Caveats list
- PC-cillin Internet Security 2005, PC-cillin Internet Security 2006, and OfficeScan Client. - There is an issue with this version and CCA 4.0.5.0, as discussed in Cisco's Open Caveats list
- Other antivirus applications not released by Symantec, MacAfee, or Trend Micro
Mac
Computers that are running Mac OS X currently do not need the Cisco Clean Access Agent, and only need to log in at the Cisco Clean Access web page. For a tutorial, you can see Getting connected with an Alternative OS.
Linux
Computers that are running Linux do not need the Cisco Clean Access Agent, and only need to log in at the Cisco Clean Access web page. For a tutorial, you can see Getting connected with an Alternative OS.
Other Network Devices
Computers that are running operating systems other than Microsoft Windows, Mac OS X and Linux should be able to access the internet by logging in at the Cisco Clean Access web page. For a tutorial, you can see Getting connected with an Alternative OS.
If you are using an alternative Operating System and are unable to log in or are prompted to download the CCA Agent, please contact the IT Helpdesk for assistance.
Gaming Consoles
Since video game consoles (such as Xbox, Playstation, and Gamecube) do not have web browsers, they are unable to log in to Cisco Clean Access. To use these devices on the internet, the MAC (Media Access Control, often referred to as "physical") address of the game console must be manually added in to the exceptions list at the console registration page. For more information, you can read the tutorial Getting a game console connected.
TiVos
TiVos and other DVR devices are allowed on the network if they have a wired network card (wireless cards are not supported). Since these devices do not have web browsers, they are unable to log in to Cisco Clean Access. To use these devices on the internet, the MAC (Media Access Control, often referred to as "physical") address of the DVR must be manually added in to the exceptions list at the console registration page.
PDAs
Since many PDAs use wireless or a host PC for their internet connection, they should not have to pass through Cisco Clean Access. If you do have a wired network card on your PDA, please contact the IT Helpdesk.
Routers/Wireless Access Points
Due to the disruptions they can cause, Routers and Wireless Access Points are not allowed on the WSU Network.
FAQ
Frequently Asked Questions about Cisco Clean Access can be found at the Cisco Clean Access (FAQ).
Common Errors
To read about common errors with Cisco Clean Access, please see the tutorial Common Errors with Cisco Clean Access.
