Downloading and Installing Cisco Clean Access Agent

User Authentication 
Web Login 
Clean Access Agent 
Vulnerability Assessment 
Network Requirements 
Remediation 
Removing Clean Access Agent 

User authentication

User authentication simply means you need to provide proper credentials (i.e. your Lindenwood University Email username and password) in order to gain access to the network. There are two methods for entering this information: Web login and Clean Access Agent.

Web Login

Open any web browser, such as Internet Explorer, Safari, Firefox, Opera, etc. If your network settings are configured properly, you should be automatically redirected to the authentication page:


Once you have read and understand the Network Acceptable Use Agreement, enter your Lindenwood University Email username and password and click Continue . If you don’t know your Email username or password, call the helpdesk at X5100.

Web Login is the user authentication method for all non-Windows based computers. Users running Windows 2000 or higher are required to authenticate using the Clean Access Agent.


Clean Access Agent

If you are running Windows 2000 or higher, you need to install the Clean Access Agent and use it to log in. After you Web Login the first time you will be automatically redirected to the Clean Access Agent Download page:

Click the Download Clean Access Agent button. Although you can choose to open (i.e. install) the file directly, we recommend saving it to your hard drive so you can re-install at a later time, if necessary.

Once the CCAAgentSetup installer is saved, double-click to install and simply follow the wizard installation instructions. The entire process should only take a minute or two.

Once Clean Access Agent is installed, the login window will appear automatically whenever your computer attempts to access the network. Enter your Lindenwood University Email username and password and click Login. (Note: The authentication provider should be ResNet Login.)

If the Clean Access Agent log in window doesn't appear automatically, you probably have an installed firewall (e.g. Norton Internet Security) preventing the window from popping up. To bypass this problem, modify your firewall rules to allow Clean Access Agent (port 8905). The method for modifying the rules vary depending on the firewall you're running.


Vulnerability assessment

After you successfully log into the system, Clean Access checks your computer for vulnerabilities to make sure it meets the necessary security requirements for connecting to the network. Only compliant computers are granted full network access.

What are the requirements for accessing the network?

It's possible that the minimum requirements may vary from time to time in order to remain proactive in preventing new viruses and trojans from infiltrating the network. Basically, all students are accountable for keeping their computer updated with current antivirus software and all operating system security patches. Here are the current and planned specific requirements that Clean Access checks:

Windows XP

Current requirements:

  • Clean Access Agent 3.5.x
  • Automatic Updates enabled and set to "Download and prompt..."
  • All Windows Critical updates through SP2
  • Up-to-date Antivirus software AVG, Computer Associates, Symantec/Norton , McAfee or TrendMicro
Windows 2000

Current requirements:

  • Clean Access Agent 3.5.x
  • Automatic Updates enabled and set to "Download and prompt..."
  • All Windows Critical updates through SP4
  • Up-to-date Antivirus software AVG, Computer Associates, Symantec/Norton , McAfee or TrendMicro
Windows ME/98

Current requirements:

  • Windows 98/ME is not supported on the Lindenwood University Network effective Fall Semester 2006.
Macintosh

Current requirements: None

Linux Current requirements: None

If no vulnerabilities are found, your computer is considered compliant and is granted full network access. If vulnerabilities are found, your computer is moved into remediation.

Remediation

If your computer fails the vulnerability assessment, it is moved into remediation, and you are provided with directions for fixing/patching it. You are given temporary network access (to limited sites) in order to download any necessary software. Clean Access makes the distinction between REQUIRED and OPTIONAL software.
Missing REQUIRED Software

Required software must be installed before your computer will be granted network access. If your computer is missing required software, you'll see a message like this:

Click the Go To Link (or Download) button to download and install the required software. Because the software is required, you must install it before full network access is granted.

Removing Clean Access Agent

By Fall 2005, the Clean Access Agent will be required in all residence halls on campus. If you connect your computer to the Internet somewhere other than in a residence hall, the Clean Access Agent is not required and simply will not appear. However, if you move off-campus and no longer need to connect your computer to ResNet, you'll probably want to remove the Clean Access Agent. To do so, go to Start -> Control Panel -> Add or Remove Programs. Select Clean Access Agent and click Remove.