We do pretty much the same thing - once we've verified the AV is 
installed and working properly we add the user's LDAP account to a 
special role that doesn't check for AV.

-Nick
_____________________________________
Nicholas Pistentis
Manager, Student Technology Services
George Washington University
[log in to unmask]
202.994.6202

Brian Beausoleil wrote:
> We create a filter for their mac address with the check option assigned to a
> role created for AV.  The role has all the requirements except AV.  This
> allows us to scan their computers and force them to do windows updates and
> things of that nature and not allow them on until they pass those
> requirements.  1 requirement we do have for them before they are filtered is
> they must bring their computer to us and allow us to see that their AV is up
> to date, then we create the filter.  We have around a dozen students in this
> role currently.
> 
> This goes for McAfee 2007 also.  We haven't seen any other manufacturers so
> far.
> 
> 
> Brian Beausoleil
> Network Services
> Southern CT State University
> Office: (203) 392-6109
> Email: [log in to unmask]
>  
> 
> -----Original Message-----
> From: Cisco Clean Access Users and Administrators
> [mailto:[log in to unmask]] On Behalf Of ResNet-Info
> Sent: Wednesday, October 25, 2006 9:05 AM
> To: [log in to unmask]
> Subject: How are you dealing with NortonAV 2007?
> 
> We've had a few more students start complaining on our public message
> boards about not being able to get through CCA because they upgraded to
> Norton AV 2007.  While it is only a few students, they're being pretty
> vocal about it and its become more of a customer service issue than a
> technical one.  We would like to find some kind of temporary solution
> until Cisco comes out with a rule for it for the 3.6 tree until we move to
> 4 in January (support for NAV07 in 4 is supposed to be out in Nov, I
> think).
> 
> So, those of you that have ran into this - what have you done to help
> students running Norton AV 2007 get on CCA?
> 
> We have been telling them to uninstall it and install our licensed McAfee
> AntiVirus until its supported.  That worked when it was only three
> students, not so much at this point.
> 
> Thanks!
> 
> Doug Chudzik
> ResNet Manager
> Wellesley College
> 
> 
>