Home » About DSU » Administration » Special Projects » Office of Information Technology » Wireless Internet – Clean Access

Cisco NAC Agent FAQs

How do I login to access the Internet?

  • Login using your student email address and associated password:  ex: jdoe44 (you do not need to enter anything after the @ symbol on your address).  Use the password associated with your OkraMail address.

  • You will be prompted to install the Clean Access agent on your computer.  Once it installs, the agent will confirm that you have an active AntiVirus application as well as any Windows critical updates.  If either of these items are missing, you will be prompted to install them.  You will be referred to a number of free antivirus software applications if you do not have one.

  • Once the process has completed, you will be able to access the Internet.

  What is the Cisco NAC Agent?
Clean Access allows the University to ensure network users are safe to be on the network. With recent virus outbreaks, computers which are not patched or do not run virus scan are at risk of infecting others and disrupting network services. Initially when logging on through a Clean Access protected network, each computer is scanned for viruses and possible security holes.

Until you log in, you will have limited network access. After you log in, you will be able to access all network services, but the Agent will remain behind the scenes protecting the network.

The NAC Agent is a solution provided by Cisco that performs network validation. The software performs the following functions:

·         Require authentication to the network

·         Validate whether the system connecting to the network meets the minimum security standards.

·         Quarantines the system until it meets the minimum security standards.

·         Provides access to the remediation sites. Once the system is validated as “clean,” allows access to the network.

Clean Access Agent is a small program that runs on your PC. It is currently required only for systems running Microsoft Windows 98 SE, ME, 2000, XP or Mac OSX. Whenever you access the Internet through the campus network, Clean Access Agent will run. It will ask you for your Delta State userid and password. (This is the same info that DSU Online Services asks for.) Your PC will be scanned for the latest operating system (OS) updates and the newest virus definitions.

If you’re not up-to-date, your PC will be in a ‘Temporary’ mode. It will have 45 minutes to get to the websites it needs to bring itself up to the University security standards, such as and antivirus web sites but access to the local network will be limited. Once your PC is up-to-date, re-run Clean Access Agent and you’ll be surfing the web safely will full access to all University resources.

 What does this mean to me?

It means that you’ll now be more protected from threats such as viruses and internet worms. If you have not updated your Windows patches and installed antivirus software then Clean Access will ensure you install these required security components before you are allowed to use the campus network.

What does Clean Access Agent look at?

The only files Clean Access Agent looks at on your PC are OS files and anti-virus files. It doesn’t look at pictures, music files, or your last term paper. It doesn’t care about those things, and neither do we. We just want your PC to be up-to-date and "play nice" on the network.

Anti-virus software is required? I’m not paying for that!

Good! We don’t want you to either and there are many free options on the Internet. If you don’t have antivirus, click here to chose from several free and supported antivirus versions: http://www.deltastate.edu/antivirus

Why Are We Introducing this Solution Now?

Each semester, machines are introduced to the campuses that potentially contain harmful viruses and malware. This activity not only jeopardizes the campus network and your individual computer, but can significantly impact the speed of the network for others.  On move-in weekend in particular, worms and viruses attempt to spread to unpatched/vulnerable machines. Its been determined that the best way to prevent this from happening is to insure that virus software and Operating System critical update/patches are current and maintained BEFORE allowing computer systems to access the campus network.

What is the Cisco NAC Agent (Formerly Clean Access Agent)?

The Cisco NAC Agent is the client application that can check certain security settings on any Microsoft Windows PC to make sure that the system is up-to-date with required security patches and report this status to the Clean Access Server. No information about the user or the content of user files is sent to the server. Each user must use Clean Access Agent for his/her computer in order to authenticate and use the university network.

What Validation Checks are being performed?

The Agent will ensure machines running Microsoft Windows have Critical Updates installed and that antivirus software is installed, running and up-to-date.

How Long Do the Validation Checks Take?

It depends on how protected your computer is. If you have your most recent virus definitions as well as windows updates, you should sail on through with no action needed in probably under 2 minutes the first time and faster after that. If, however your computer requires those actions to obtain protected status, it could take a significant amount of time.

Isn’t this heavy handed?

We take seriously our responsibility to protect our users from the dangers that exist in today’s computing environment. The internet is filled with malicious code that can infiltrate user’s computers in various ways. Spyware, viruses, internet worms, are all examples of malicious code which can be used to steal personal information such as online banking account information, credit card information, personal records such as social security numbers, etc. Identity theft is the fastest growing crime in America today and the numbers are both staggering and disturbing. For more information on the fastest growing crime in America visit http://www.ftc.gov/idtheft/. While the NAC solution requires some initial effort on the part of our users we believe it will improve the network experience overall and save users countless hours in the long run.

I have a gaming console which uses the network for gaming, what do I do?

Please click here to register your device with OIT.

Why do I need the Cisco NAC Agent?

It is not possible to remotely check your computer to make sure it has all security patches and antivirus updates. By running on your computer, the Clean Access Agent can check your computer and report back to the Clean Access server.

What does the Agent do?

The Clean Access Agent is the client application that can check certain security settings on any Microsoft Windows PC to make sure that the system is up-to-date with required security patches and report this status to the Clean Access Server. No information about the user or the content of user files is sent to the server. Each user must use Clean Access Agent for his/her Microsoft Windows PC in order to authenticate and use the university network.

The software performs the following functions:

·         Validate whether the system connecting to the network meets the minimum security standards.

·         Quarantines the system until it meets the minimum security standards.

·         Provides access to the remediation sites.

·         Once the system is validated as "clean," allows access to the network.

 

How do I download Cisco NAC Agent?

Just open your Internet browser (i.e., Internet Explorer, Firefox, etc.) from the OkraNet wireless access service and you’ll be redirected to our registration page where you can download the program.

Does Cisco NAC Agent have spyware in it?

No. Delta State is using Clean Access to enforce our security policies to better protect everyone on the campus network and nothing else! The Clean Access agent is not used to monitor your network traffic, block any software applications, or read or access any files or data on your computers hard drive.

 

Print Friendly