Cisco Clean Access
From The University of Akron Support Center Wiki
| Residence hall users You MUST take the following steps before using Cisco Clean Access in the residence halls
|
Contents |
What is Clean Access?
Cisco Clean Access is a solution the University of Akron is using to help ensure that your system is better protected. This requires that end users meet certain requirements before accessing the network. The details regarding the requirements can be found on the support page below. If you have any questions, concerns, or problems, please contact the ZipSupport Center at
(330) 972-6888.
Installation Instructions with Internet Explorer and Firefox are available below. Other browsers are supported.
Note: These documents are available from on-campus only
Internet Explorer
Firefox
Clean Access Deployment Locations
- Currently ALL wired connections in the residence halls are Clean Access enabled. Quaker Square & Garson are wireless only and will be covered later.
- Windows is currently the only operating system that will require the CA Agent (Software). There is a client for MAC which we will be testing.
- MAC and Linux will be redirected to a web login screen and will be required to logon, but no installation will be required.
- Guest Access is not available. Currently only valid uanet ID's are permitted to logon to our network.
Clean Access Checks
- Windows Vista Service Pack 1
- Windows XP Service Pack 3
- Windows 2000 Service Pack 4
- Internet Explorer version 6 or newer
- Anti-Virus software (about 60 various programs, contact WAN with the vendor and version if you are unsure if it will work)
- Updated Anti-Virus Definitions
- Check if Automatic Updates are Enabled, if not recommend that they be turned on but do not restrict access
Game Consoles
Game consoles are automatically detected by Cisco Clean Access. This is done in order to simplify the process of playing online games. Most game consoles should work without any problems. There is a chance that it may not be automatically detected. If this is the case please contact the Zip Support and have them open a ticket to WAN. Please include the MAC address of the device in question as it will be needed for troubleshooting purposes.
Most online games should work. Some will not work due to the NAT type that is in use in the residential network. If it appears to be a blocked port it is possible we were not aware of that game or the necessary ports it needed to allow for online play. If that appears to be case, please contact the ZipSupport Center and have them open a ticket to WAN with the name of the game in question and the type of game console in use.
Cisco Clean Access FAQs
Q: Do I have to use the Clean Access Agent client?
A: Yes, all Windows PCs are required to use the Clean Access Agent for network access. There is an agent for MAC but it is not currently required.
Q: I cannot install the Clean Access Agent, it warns me about administrative rights. What should I do?
A: You must be logged onto your computer as a user with administrative rights or as the administrator; this should not be an issue with student computers.
Q: How do I know the Clean Access Agent is installed successfully? How do I know the Clean Access Agent is running?
A: Look for Clean Access System Tray Icon in the lower right corner of your screen in the Notification Area. The icon will be a key on a green background.
Q: What happens if I uninstall the Clean Access Agent?
A: You will be required to reinstall the client to re-authenticate when your login expires.
Q: I keep trying to install the Clean Access Agent, but it tells me that I can either Modify/Repair or Remove the program. What should I do?
A: This means the Clean Access Agent is currently installed on your machine. You do not need to install it again.
Troubleshooting Guide
Receiving the error message:
Unexpected error, quitting
- Uninstall all previous versions of Cisco Clean Access Agent before continuing.
- Install this version of Clean Access (Agent Version 4.1.6.0) and allow the agent to perform the upgrade.
This should allow the update to install and run correctly.
Receiving the error message:
XBOX / XBOX 360 MTU failed
- Go to the System area of the Xbox Dashboard and select Network Settings.
- Select Edit Settings.
- From Additional Settings, select Advanced Settings.
- At the bottom of this screen you'll see a heading called Alternate MAC Address.
- Delete the Alternate MAC. Clean Access is now capable of detecting your console automatically
- Do a Hard reset of the XBOX (Power the unit off, then power it on)
Receiving the error message:
Network (or Server) cannot be parsed
- This error occurs when trying to login to Clean Access.
- Open up Internet Explorer.
- Click on the Tools Menu and go to Internet Options.
- Click the Connections Tab.
- Click LAN Settings at the bottom
- Uncheck Automatically Detect Settings
- Click Ok all the way through and close IE. Try logging in to Clean Access again.
Receiving the message when signing on to Internet Explorer:
Security Message - Access Blocked
You don't have access to this URL from your current location. If you feel that you have received this message in error,
please contact your network administrator.
This most likely is the result of your computer having the same MAC Address as a gaming console. The only way to take care of this problem is to have someone at the Support Center remove your console from the list. This will mean that you are no longer able to game online on your console. So it is recommended that you change the MAC address on either the console or the computer, which you can be walked through by the Support Center
If unable to access the internet but are logged in sucessfully, attempt the following steps:
- Under the file menu at the top of the screen make sure that work offline is not selected (does not have a check mark next to it)
- If the origional way to connect to the internet was dial-up, make sure that the option to dial up is un-checked by opening (tools -> internet options -> Connections tab -> and the option to Never dial a connection is checked)
- Always attempt to logout and log back in
- If ever prompted to allow the Clean Access access to the Internet always allow
If the Vista Version of McAfee will not update
Note: This is the Mcafee Enterprise 8.5i version. The University no longer gives this version out to students but some may still have it.
- Right click on McAfee in the bottom right had corner.
- Select Virus Scan Console...
- Right Click on AutoUpdate, the last option within VirusScan Console
- Select the last option, properties
- Under the section head Update Options there should be three check boxes, Get newer detection definition files if available, Get newer detection engine and dats if available, and Get other available updates(service packs, upgrades, etc.)
- Make sure all three of these boxes are checked
- Next click Ok to close out that box
- Click on tools and select Edit AutoUpdate Repository List...
- From this window uncheck the first listed Repostiory, ePO_ELPOLMB1
- Rerun autoupdate and McAfee should be fully up to date now.
Frequently Asked Questions Clean Access Agent Installation
Q: Do I have to use the Clean Access Agent?
A: Yes. All Windows PCs are required to use the Clean Access Agent for network access.
Q: I cannot install the Clean Access Agent, it warns me about administrative rights.
A: You must be logged onto your computer as a user with administrative rights or as the administrator. Contact Help Desk (330/972-6888) if do not have administrative rights.
Q: How do I know Clean Access Agent is installed successfully?
A: Look in the “System Tray” for in the lower right corner near the time display. You may need to select the “<<“ to expand and show the Clean Access Agent icon.
Q: What happens if I uninstall the Clean Access Agent?
A: You will be required to reinstall the client to re-authenticate when your login expires.
Q: I keep trying to install the Clean Access Agent but it tells me that I can either Modify/Repair or Remove the program. A: Clean Access Agent is currently installed on your machine. You do not need to install it again.
Q: I do not see the Clean Access Agent icon in my system tray; what do I do?
A: There are a few possibilities:
1.
Clean Access Agent has not been installed.
*
Please install Clean Access Agent to continue. 2.
Clean Access Agent has been installed but you did not select “Launch” at the end of the installation.
*
From the “Start” menu, then “Programs”, then “Cisco”, then “Clean Access Agent”, then “Clean Access Agent” to launch the program. 3.
Clean Access Agent is “hidden” in the Systray.
*
Please click on “<<“ to expand the system tray list and show Clean Access Agent, then login. 4.
Your computer has a problem showing Systray icons.
*
You may be able to use “taskmanager” to halt Clean Access Agent and then launch it again. 5.
Clean Access Agent is installed but not running.
*
From the “Start” menu, then “Programs”, then “Cisco”, then “Clean Access Agent”, then “Clean Access Agent” to launch the program.
Login and Logout
Q. How do I login?
A: Right click Clean Access in the taskbar and select Login.
Q: I do not see the Clean Access Agent popup?
A: You can manually login by using the Clean Access Agent login feature. Right-click the Clean Access Agent icon in the system tray and choose “login.”
Q: I’ve opened my browser with a default blank page but I am not redirected to a login page.
A: Go to a non-local site such as www.google.com
Q: I’m on a Windows machine. Sometimes I can login using the web page and at other times, the web page tells me that I must use Clean Access Agent, why?
A: It depends on when the last time your computer was “validated” to the network. You should always use the SmartEnforcer client.
Q: How do I logout?
A: Currently, the only way to manually logout is to use the Clean Access Agent “logout” feature. Right-click the Clean Access Agent icon in the system tray and choose “logout.”
Q: I do not have a “logout” option in Clean Access Agent.
A: Once you login through the Clean Access Agent, you will have the “logout” feature.
Q: I am able to access the internet but the Clean Access Agent still allows me to “login”. Am I logged in?
A: Yes, the Clean Access Agent may not always detect your network status. If you can access normal internet sites such as www.google.com, then you are authenticated.
Q: I am NOT able to access the internet but the Clean Access Agent only allows me to “logout”. What’s going on?
A: The Clean Access Agent may not always detect your network status. Please choose “logout” and then choose “login” again.
Q: The Clean Access Agent does not offer a “login,” just a “logout,” and the web page tells me that I must now use SmartEnforcer to login; what do I do?
A: The Clean Access Agent does not always detect your network status. Please choose “logout”, then you will have the “login” feature Validating and Updating
Q. When I run Windows Update, I get a message stating that the product key used to install windows is invalid?
A. Windows Update will fail if your Windows OS is not properly licensed. You must have a legal copy of the operating system to connect to the network.
Clean Access Root Certificate
Clean Access Root Certificate can be found Right Click and select Save As...
The file is compressed. If you are unable to decompress it, please use 7-Zip,
the program can be downloaded Right Click and select Save As...
