Cisco Clean Access Agent - Sucks.

[Zambini]

So at my school (UC Santa Cruz), as well as all other UCs, and a wide variety of places where a large network of different computers exists, the network admins use something called Clean Access Agent, by Cisco Systems.

In essence, it is a program you have to install to protect the network from "dirty" computers. Computers with no Anti-Virus / poor security settings. Aside from the Spy-ware like network monitoring, and the ridiculous power they have over institutions that use this software (the entire network relies on the Cisco server, which I'm sure requires a Cisco professional to maintain), this program is a PAIN IN THE ASS.

I recently upgraded to AVG 8.0, and now, CAA says I don't have an Anti-Virus installed on my computer, and I have to download their copy of McaFee (NO WAY JOSE) and install it to access the internet in Windows.

It is REQUIRED to use CAA to get online (if you're in Windows), and since it wont let my online because I "don't have an Anti-Virus installed" I was going to try a simple work around, by opening up the login page and telling the network that I'm running Ubuntu while actually inside windows. Just to be safe though, I double checked by reading through my internet usage policy and discovered that I can be suspended/expelled for "falsifying information to circumvent network protection" So that was out of the question.

Instead of this, I just booted into Ubuntu and have been in Ubuntu for several days now (not complaining, it kind of forces me to get work done on my review :P, and I really enjoy living in Ubuntu aside from no tv-tuner and no games), waiting a reply from my ITS department. Now I finally get a reply (they're closed on the weekend)

AVG 8.0 is not compatible with the current version of Cisco Clean Access. I believe your best option is to switch to another brand of anti-virus software. The school offers a free edition of McAfee Anti-virus software which is easily accessible through Cisco Clean Access.

Below is a link to the list of antivirus software compatible with Cisco clean access.
Release Notes for Cisco NAC Appliance (Cisco Clean Access), Version 4.1(0)* [Cisco NAC Appliance (Clean Access)] - Cisco Systems

I am sorry for the inconvenience.

I'm sure that since its Cisco, and not an open-source program, it will be months, possibly even into next school year that it gets fixed, by which time I'll be off campus and not on our crappy-ass network.

So now I'm off to scour my hard drive for my AVG 7 installer, which I luckily haven't deleted, and is conveniently on my 4gb flash drive under "Security Software" right next to my ZoneAlarm Pro installer.

/rant

[screwballl]

if you need the 7.5 installer let me know, I still have it here... or you can remove 8.0 and try Avira Free antivirus - Avira AntiVir

[polobunny]

Heh, that's often the problem with huge company maintained security products. They're not always up-to-date and worst of all is that it can take a damned while for them to 1) realize they're not 2) get up-to-date.
My dad has to use some Cisco VPN pre-configured client to access his work computer via remote desktop. Guess what? It's not Vista compatible as of now.
You want worst? The service behind that is set to automatic, so it runs all the time on the client computer. That wouldn't be so bad if the service didn't hang half the time when it's starting...

[CiscoFan]

AVG 8.0 is supported on CCA as of 4.1.3.2, which was released April 7th.

Why assume that it was Cisco that was behind?

[screwballl]

Its more fun to blame the big companies (joking)

[Zambini]

I found my AVG 7.5 installer :P Thanks though :D

Originally Posted by CiscoFan

AVG 8.0 is supported on CCA as of 4.1.3.2, which was released April 7th.

Why assume that it was Cisco that was behind?

Well I can't download/install the latest version because it doesn't know there's an update for itself (last time I updated it it just popped up and said "Update Me"). With all programs that function properly, it checks daily/each load for updates.

Why they don't have dynamic/automatic updates is beyond me.
'course that assumption comes with the bias that I hate CAA. So naturally I'll blame Cisco.

[CiscoFan]

Ummm..your school needs to update their CCA servers. Then when you connect it will update your client (if necessary).

So it is dynamic, once the servers are updated.

[Zambini]

Originally Posted by CiscoFan

Ummm..your school needs to update their CCA servers. Then when you connect it will update your client (if necessary).

So it is dynamic, once the servers are updated.

lol I didn't even notice ur username.


I still don't like it, even if you take out the AVG 8.0 non-updating issue.

[petarggh]

heya, I also live under the UCSC clean access umbrella. tomorrow is supposed to be the update to handle AVG8, though troubles are expected. If it works I'll be installing avg8 tomorrow.

bleh

[Boy'nBlack]

The rule doesn't make sense though. Having or not having an AV scanner should not effect what can happen by just getting on the internet. You'd think Cisco would black list known sites. Won't catch all, but more tolerable all around than thinking having an AV app like McAfee will save the network.

AV doesn't stop me from getting infected from P2P clients...just got a nasty VirtuMonde and ZapChast. AV doesn't stop that from happening enough to lean on it as a rule. Mcafee and Norton are just as bad as Viri themselves for the most part.

Just sounds odd to force users to use AV like it does something. With Cisco being the client, all virus should stop coming in from there. Having an AV client on a machine also doesn't mean it's ever scanned. So I just find it confusing to be mandatory when there's other options.