Computer Associates G01028-1E Manuel utilisateur

InstallationGuide

r1 G01028-1E

TrustTM AgentforCiscoNetwork

dmissionControl(NAC)

This documentation and related computer software program (hereinafter referred to as the "Documentation") is for

the end user's informational purposes only and is subject to change or withdrawal by Computer Associates

International, Inc. ("CA") at any time.

This documentation may not be copied, transferred, reproduced, disclosed or duplicated, in whole or in part, without

the prior written consent of CA. This documentation is proprietary information of CA and protected by the copyright

laws of the United States and international treaties.

Notwithstanding the foregoing, licensed users may print a reasonable number of copies of this documentation for

their own internal use, provided that all CA copyright notices and legends are affixed to each reproduced copy. Only

authorized employees, consultants, or agents of the user who are bound by the confidentiality provisions of the

license for the software are permitted to have access to such copies.

This right to print copies is limited to the period during which the license for the product remains in full force and

effect. Should the license terminate for any reason, it shall be the user's responsibility to return to CA the reproduced

copies or to certify to CA that same have been destroyed.

To the extent permitted by applicable law, CA provides this documentation "as is" without warranty of any kind,

including without limitation, any implied warranties of merchantability, fitness for a particular purpose or

noninfringement. In no event will CA be liable to the end user or any third party for any loss or damage, direct or

indirect, from the use of this documentation, including without limitation, lost profits, business interruption,

goodwill, or lost data, even if CA is expressly advised of such loss or damage.

The use of any product referenced in this documentation and this documentation is governed by the end user's

applicable license agreement.

The manufacturer of this documentation is Computer Associates International, Inc.

Provided with "Restricted Rights" as set forth in 48 C.F.R. Section 12.212, 48 C.F.R. Sections 52.227-19(c)(1) and (2) or

DFARS Section 252.227-7013(c)(1)(ii) or applicable successor provisions.

All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.

Contents iii

Contents

Chapter 1: Overview 5

How the eTrust Agent for Cisco NAC Works ..................................................... 5

Computer Associates NAC-Enabled Applications................................................. 6

System Requirements .......................................................................... 6

Product Components........................................................................... 7

Chapter 2: Setting Up eTrust Agent for Cisco NAC 9

Add Computer Associates Attributes to the NAC Database ....................................... 10

Install the Cisco Trust Agent ................................................................... 10

Install the eTrust Agent for Cisco NAC ......................................................... 11

Verify the Installation ......................................................................... 11

Appendix A: Computer Associates Attribute Information 13

Application Types ............................................................................ 13

eTrust Antivirus Attributes .................................................................... 14

eTrust PestPatrol Anti-Spyware Attributes ...................................................... 15

Overview 5

Chapter 1: Overview

This chapter provides a brief description of how the eTrust Agent for Cisco

Network Admission Control (NAC) works and lists the Computer Associates

applications that are currently NAC-enabled. In addition, this chapter describes

system requirements and product components.

Note: This document assumes that Cisco NAC is fully installed and running in

your network environment. For information about Cisco NAC, refer to the

following Cisco documents:

Network Admission Control (NAC) home page:

http://www.cisco.com/en/US/netsol/ns466/networking_solutions_sub_so

lution_home.html

NAC User Guide for Cisco Secure ACS 3.3

http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_u

ser_guide_chapter09186a0080233612.html

NAC Attribute Management

http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_u

ser_guide_chapter09186a0080233621.html#wp617627

How the eTrust Agent for Cisco NAC Works

The eTrust Agent for Cisco NAC discovers the posture attributes for Computer

Associates applications on an end-point device that attempts to access or use

resources on a network administered with Cisco NAC. The Cisco Trust Agent

(CTA), also located on the end-point device, passes the posture attributes to a

Cisco Access Control Server (ACS). The ACS compares the posture attributes

with a set of policies previously defined by a network administrator. Based on

the results of the comparison, the end-point device may either be granted full

primary network access or placed into a separate virtual network, where the

device can go through a remediation process before it is allowed to connect to the

primary network.

Computer Associates NAC-Enabled Applications

6 Installation Guide

Computer Associates NAC-Enabled Applications

The following Computer Associates applications are NAC-enabled:

InoculateIT 6

eTrust Antivirus r6, r7, r7.x

eTrust PestPatrol Anti-Spyware r5

eTrust PestPatrol Anti-Spyware Corporate Edition r5

The eTrust Agent for Cisco NAC discovers the posture attributes of these

applications if they exist on an end-point device.

System Requirements

An end-point device running the eTrust Agent for Cisco NAC requires the

following:

System Components

Pentium-class processor

Network connection

Operating System

English version of:

Windows NT, with Service Pack 6

Windows 2000

Windows XP Professional

Hard Disk Space

20 MB

Memory

128 MB for Windows NT and Windows 2000

256 MB for Windows XP

Software

Cisco Trust Agent 1.0

Product Components

Overview 7

Product Components

The eTrust Agent for Cisco NAC consists of the following components:

cai-pp.txt

The cai-pp.txt file contains information for Computer Associates applications

in the form of attribute/value pairs. You use this file with the CSUtil.exe

program to add the Compute Associates product attribute definitions to the

Cisco Secure ACS NAC database.

cai-pp.dll

The cai-pp.dll file is the eTrust Agent for NAC, which discovers the posture

attributes of Computer Associates applications running on an end-point

device. You use the CAPPInstall.exe program to install the plug-in on an

end-point device.

cai-pp.inf

The cai-pp.inf file contains the eTrust Agent attribute definitions. The Cisco

Trust Agent uses this file to communicate Computer Associates product

attributes to the Cisco Secure ACS database.

Setting Up eTrust Agent for Cisco NAC 9

Chapter 2: Setting Up eTrust Agent for

Cisco NAC

This chapter contains procedures for setting up eTrust Agent for Cisco NAC. The

set up process includes:

Adding Computer Associates attributes to the Cisco Secure ACS NAC

database

Installing the Cisco Trust Agent on all end-point devices

Installing the eTrust Agent for Cisco NAC on all end-point devices

Verifying the installation

Note: The procedures in this chapter assume Cisco NAC is currently running in

your network environment and is administered with Cisco Secure ACS 3.3.

Add Computer Associates Attributes to the NAC Database

10 Installation Guide

Add Computer Associates Attributes to the NAC Database

Before you can define policies for Computer Associates posture attributes, you

must first add the attribute/value pairs to the Cisco Secure ACS NAC database.

Note: The following procedure assumes Cisco Secure ACS 3.3 is installed at:

C:\Program Files\CiscoSecure ACS v3.3

To add Computer Associates attributes to the Cisco Secure ACS NAC database,

follow these steps:

1. Go to the Computer Associates SupportConnect website,

http://supportconnect.ca.com, and locate the eTrust Agent for Cisco NAC.

2. Download the eTrust Agent for Cisco NAC to a system typically used for

network management tasks.

3. Extract the contents of the downloaded zip file to a temporary directory,

such as C:\Temp.

4. On the Cisco Secure ACS 3.3 for Windows system, copy the file cai-pp.txt to:

C:\Program Files\CiscoSecure ACS v3.3\Utils

The cai-pp.txt file contains the attribute/value pairs for NAC-enabled

Computer Associates applications.

5. From the C:\Program Files\CiscoSecure ACS v3.3\Utils directory, run the

following command:

CSUtil.exe -addavp cai-pp.txt

The CSUtil.exe program adds the attribute/value pairs to the Cisco Secure

ACS NAC database.

Use the Cisco Secure ACS user interface to configure policies for Computer

Associates products. For instructions, refer to the Cisco document NAC User

Guide for Cisco Secure ACS 3.3.

Install the Cisco Trust Agent

Install the Cisco Trust Agent on all end-point devices, such as desktop

computers, workstations, laptops, and servers that connect to or use network

resources. Download and install the Cisco Trust Agent 1.0 from the Cisco

website, http://www.cisco.com.

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Computer Associates Logiciel

Computer Associates

Computer Associates ARB6002700WF0. ..... - BRIGHTSTOR ARCSERVE... Manuel utilisateur

Computer Associates

Computer Associates BABWBN2900E20 - BRIGHTSTOR ARC BACKUP V9... Manuel utilisateur

Computer Associates

Computer Associates SQLSTQ99000600 - Unicenter SQL-Station 6.0.0 Manuel utilisateur

Computer Associates

Computer Associates BABNWUP900NE6 - BRIGHTSTOR ARCSERVE BACKUP... Manuel utilisateur

Computer Associates

Computer Associates ETRAVE7005BPUE - UPG ETRUST ANTIVIRUS.V7... Manuel utilisateur

Computer Associates

Computer Associates BABWBN2900NE5 - BRIGHTSTOR ARC BACKUP V9 DIS Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur