Cisco Clean Access
From The University of Akron Support Center Wiki
Contents |
What is Clean Access?
Cisco Clean Access is a solution the University of Akron is using to help ensure that your system is better protected. This requires that end users meet certain requirements before accessing the network. The details regarding the requirements can be found on the support page below. If you have any questions, concerns, or problems, please contact the ZipSupport Center at
(330) 972-6888.
Installation Instructions with Internet Explorer and Firefox are available below. Other browsers are supported.
Note: These documents are available from on-campus only
Internet Explorer
Firefox
Clean Access Deployment Locations
- Currently ALL wired connections in the residence halls are Clean Access enabled. Quaker Square & Garson are wireless only and will be covered later.
- Windows is currently the only operating system that will require the CA Agent (Software). There is a client for MAC which we will be testing.
- MAC and Linux will be redirected to a web login screen and will be required to logon, but no installation will be required.
- Guest Access is not available. Currently only valid uanet ID's are permitted to logon to our network.
Clean Access Checks
- Windows XP Service Pack 2
- Windows 2000 Service Pack 4
- Internet Explorer version 6 or newer
- Anti-Virus software (about 50 various programs)
- Updated Anti-Virus Definitions
- Check if Automatic Updates are Enabled
Game Consoles
Game consoles are automatically detected by Cisco Clean Access. This is done in order to simplify the process of playing online games. Most game consoles should work without any problems. There is a chance that it may not be automatically detected. If this is the case please contact the Zip Support and have them open a ticket to WAN. Please include the MAC address of the device in question as it will be needed for troubleshooting purposes.
Most online games should work. Some will not work due to the NAT type that is in use in the residential network. If it appears to be a blocked port it is possible we were not aware of that game or the necessary ports it needed to allow for online play. If that appears to be case, please contact the ZipSupport Center and have them open a ticket to WAN with the name of the game in question and the type of game console in use.
Cisco Clean Access FAQs
Q: Do I have to use the Clean Access Agent client?
A: Yes, all Windows PCs are required to use the Clean Access Agent for network access. There is an agent for MAC but it is not currently required.
Q: I cannot install the Clean Access Agent, it warns me about administrative rights. What should I do?
A: You must be logged onto your computer as a user with administrative rights or as the administrator; this should not be an issue with student computers.
Q: How do I know the Clean Access Agent is installed successfully? How do I know the Clean Access Agent is running?
A: Look for Clean Access System Tray Icon in the lower right corner of your screen in the Notification Area. The icon will be a key on a green background.
Q: What happens if I uninstall the Clean Access Agent?
A: You will be required to reinstall the client to re-authenticate when your login expires.
Q: I keep trying to install the Clean Access Agent, but it tells me that I can either Modify/Repair or Remove the program. What should I do?
A: This means the Clean Access Agent is currently installed on your machine. You do not need to install it again.
Troubleshooting Guide
Receiving the error message:
XBOX / XBOX 360 MTU failed
- Go to the System area of the Xbox Dashboard and select Network Settings.
- Select Edit Settings.
- From Additional Settings, select Advanced Settings.
- At the bottom of this screen you'll see a heading called Alternate MAC Address.
- Delete the Alternate MAC. Clean Access is now capable of detecting your console automatically
- Do a Hard reset of the XBOX (Power the unit off, then power it on)
- If the xbox still fails at MTU, repeat the above steps; be sure the alternate MAC is not set.
Network Error: SSL certificate REV failed [12057]
- Open up Internet Explorer
- Click on Tools -> Internet Options
- Click on the Advaced tab Scroll down towards the bottom to the Security section
- Uncheck "Check for server certificate revocation"
- Close Internet Explorer and the Clean Access Agent
- Start the Clean Access Agent and login.
- Check that "Use SSL v2.0" is checked if you are still having problems
Receiving the error message:
Network Error: SSL certificate revoked.[21720]
- Open up Internet Explorer
- Click on Tools -> Internet Options
- Click on the Content tab
- Select the Option that says Certificates
- Choose the tab that says Untrusted Publishers
- Click on the Certificate issued to cas-resnet3.uakron.edu and choose the option remove
- Close out of Internet Explorer and attempt to login again, when prompted to allow the certificate CLICK YES
- This works in both Internet Explorer 6 and 7
Receiving the message when signing on to Internet Explorer:
Security Message - Access Blocked
You don't have access to this URL from your current location. If you feel that you have received this message in error,
please contact your network administrator.
This most likely is the result of your computer having the same MAC Address as a gaming console. The only way to take care of this problem is to have someone at the Support Center remove your console from the list. This will mean that you are no longer able to game online on your console. So it is recommended that you change the MAC address on either the console or the computer, which you can be walked through by the Support Center
If unable to access the internet but are logged in sucessfully, attempt the following steps:
- Under the file menu at the top of the screen make sure that work offline is not selected (does not have a check mark next to it)
- If the origional way to connect to the internet was dial-up, make sure that the option to dial up is un-checked by opening (tools -> internet options -> Connections tab -> and the option to Never dial a connection is checked)
- Always attempt to logout and log back in
- If ever prompted to allow the Clean Access access to the internet always allow
If the Vista Version of McAfee will not update
- Right click on McAfee in the bottom right had corner.
- Select Virus Scan Console...
- Right Click on AutoUpdate, the last option within VirusScan Console
- Select the last option, properties
- Under the section head Update Options there should be three check boxes, Get newer detection definition files if available, Get newer detection engine and dats if available, and Get other available updates(service packs, upgrades, etc.)
- Make sure all three of these boxes are checked
- Next click Ok to close out that box
- Click on tools and select Edit AutoUpdate Repository List...
- From this window uncheck the first listed Repostiory, ePO_ELPOLMB1
- Rerun autoupdate and McAfee should be fully up to date now.
