1. What is Cisco Clean Access?

2. How does it work?

3. Who must use it?

4. Why must it be used?

5. How often will my system be scanned?

6. What information is gathered by the scanning process?

Answers

1. What is Cisco Clean Access?

Cisco Clean Access is a network connection and compliance management solution that ensures that computers connecting to the UMKC network are protected against malicious threats such as viruses, worms, Trojans as well as known software vulnerabilities that have been exploited.  All systems at UMKC's Residence Halls must authenticate through this system.  Additionally, Windows computers must install and run the Cisco Clean Access Agent program to access the Internet.  It is this latter program that scans your system for vulnerabilities and certifies it as safe to access the campus network.  If it is found to be lacking one or more safeguards, the computer's access to network resources will be restricted to remediation websites that will allow you to fix the problems.  Remediation websites include vendors update sites from Microsoft, McAfee and Symantec.

2. How does it work?

Review the Cisco Clean Access flow chart given below.

3. Who must use it?

It must be used by all students connecting to the UMKC network from either Oak or Cherry Street Residence Halls.  However, only Windows computer must install and run the agent program for scanning and validation purposes.  Macintosh and Linux users must use the Cisco Clean Access Authentication Page to logon from their computers each time they wish to access Internet resources.  But, there are no agents for these platforms currently available.  Once your Windows computer has the Cisco Clean Access agent installed, you will use this program to logon for all subsequent access to the network.

4. Why must it be used?

This measure is necessary to protect the computer, data and network integrity of all systems in use at UMKC.  This system ensures that only safe computers are allowed to connect to UMKC network resources.  This reduces the transmission of harmful viruses and exposure of serious vulnerabilities via the network.  In today's world, security is everyone's responsibility, and the Cisco Clean Access system provides for an elegant reinforcement of this edict.

5. How often will my system be scanned?

Scans will occur once per week with new scans to be initialized on Monday morning.  If your computer fails a security check, then it will scan after each update until all applicable updates have been successfully applied.

6. What information is gathered by the scanning process?

Cisco Clean Access checks to see if your system is configured to perform Automatic Windows Updates, the current status of antivirus software and whether critical updates for your release of Windows have been installed.  Your system needs to be configured to automatically download and install Windows Updates and all Microsoft critical updates must be installed.  Antivirus software must be installed, running and updated to the vendor's latest virus definition package.  Personal information about you or your document files is never collected or accessed by this system.

Questions

1. How do I install the Cisco Clean Access agent on my Windows computer?

2. How do I install Windows Updates on my computer?

3. How do install McAfee VirusScan 8.5i on my computer?

Answers

1. How do I install the Cisco Clean Access agent on my Windows computer? [Adobe PDF document]

2. How do I install Windows Updates on my computer? [Adobe PDF document]

3. How do install McAfee VirusScan 8.5i on my computer? [Adobe PDF document]

Questions

1. I do not see the Cisco Clean Access agent after logging into the Authentication Page.  What is wrong?

2. The Cisco Clean Access agent only prompts me to logout, but I need to logon.  What should I do?

3. How can I tell if the Cisco Clean Access agent is installed and running?

4. What if the Cisco Clean Access agent is not running?

5. How do I logout from Cisco Clean Access agent?

6. Do I need to update my system through Cisco Clean Access?

7. When I run Windows Update, it says the product key used to install Windows is invalid. Why is this?

8. What happens if the Cisco Clean Access agent is uninstalled?

9. On the Cisco Clean Access Authentication Page, I see a message indicating I should disable my pop-up blocker.  How do I do this?

10. Can I use Microsoft Internet Explorer 7.0 beta with Cisco Clean Access at the UMKC Residence Halls?

11. Does Cisco Clean Access work with 64-bit versions of Windows?

Answers

1. I do not see the Cisco Clean Access agent after logging into the Authentication Page.  What is wrong?

Sometimes this will happen if your browser does not support SSL encryption.  You should use a recent version of Microsoft Internet Explorer or Mozilla Firefox.  If one is not working, you might try another browser with SSL support.  It is also possible that the Cisco Clean Access prompt will not load because you are running a pop-up blocker.  It is recommended that you disable any pop-up blocking applications before you logon to the Authentication Page for the first time or else need to reinstall the agent program. 

2. The Cisco Clean Access agent only prompts me to logout, but I need to logon.  What should I do?

The Cisco Clean Access agent may be unable to determine your current network status.  You are advised to logoff and logon in that order.

3. How can I tell if the Cisco Clean Access agent is installed and running?

You can view Installed Programs by choosing Start Menu... Settings.. Control Panel... Add/Remove Programs.  If installed, it will shows Cisco Clean Access in the list of installed programs.  You can determine whether it is running as it will display a small key-like icon in the System tray which is found in the lower right-hand corner of your Taskbar.

4. What if the Cisco Clean Access agent is not running?

You must start the agent each time you wish to logon.  You can start it by choosing Start Menu... Programs... Cisco... Clean Access Agent and select Clean Access Agent to start the program.  If you do not see this program, then it is not installed.  Go back to the Authentication Page and it should prompt you to download and install the agent.

5. How do I logout from Cisco Clean Access agent?

Right-click the Clean Access Agent icon in the System Tray and choose logout.  The System Tray is in the lower right-hand corner of your Taskbar.

6. Do I need to update my system through Cisco Clean Access?

Actually, no, you do not.  You can independently update your system via http://windowsupdate.microsoft.com and many of the popular antivirus vendor updates sites (e.g., http://update.symantec.com).  These are accessible even while you are not authenticated.  Once you authenticate or logon, your updates will be directed by the Cisco Clean Access agent.

7. When I run Windows Update, it says the product key used to install Windows is invalid. Why is this?

This means that your copy of Windows is not a legally licensed version.  You must acquire a legal copy of Windows prior to using the Microsoft Update service.  You can buy Windows XP at the University Bookstore at a significant academic discount.

8. What happens if the Cisco Clean Access agent is uninstalled?

If you go back to the Authentication Page, it should prompt you to download and install the Cisco Clean Access client application again.

9. On the Cisco Clean Access Authentication Page, I see a message indicating I should disable my pop-up blocker.  How do I do this?

Pop-up blockers have become very popular as advertisements and spyware often use browser pop-ups that bring along some nefarious effects, including the simple disruption of normal web browsing.  There are many different pop-up blockers.  Some are provide by the operating system (e.g., Windows XP Service Pack 2) or your online service provider (e.g., AOL, MSN, Yahoo!).  The National Association of College and University Business Officers (NACUBO) has generated an excellent guide to disable the most popular and widely used pop-up blockers.  Click here to read this article.

10. Can I use Microsoft Internet Explorer 7.0 beta with Cisco Clean Access at the UMKC Residence Halls?

No.  These two products are not compatible.  In fact, you must uninstall the Microsoft Internet Explorer beta version before Cisco Clean Access will work.

11. Does Cisco Clean Access work with 64-bit versions of Windows?

No.  You must use a 32-bit version of Windows 2000 or Windows XP to install and use the Cisco Clean Access agent as required.