We've done this in the past, but it seems like the setting in our CAM never sticks for very long, that or when I make other changes it resets the counter and I don't realize it. Either way I have to periodically go in and change it. It does seem to fix 90% of the issues they have though.

Michael Stanclift
Network Analyst
Rockhurst University

http://help.rockhurst.edu
(816) 501-4231

-----Original Message-----
From: Cisco Clean Access Users and Administrators [mailto:[log in to unmask]] On Behalf Of Kyle Torkelson
Sent: Thursday, December 11, 2008 8:09 AM
To: [log in to unmask]
Subject: Re: McAfee & CCA

Yeah, that's what I've found as well.  I'm looking into the
Requirement-Rule setting for our AV def check and thinking of allowing
AV def dates 1-2 days older than the current version.  I'm hoping this
might help our McAfee users but not compromise our network...



-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Stanclift, Michael
Sent: Wednesday, December 10, 2008 10:59 PM
To: [log in to unmask]
Subject: Re: McAfee & CCA

We have this issue with our 8.5 deployment as well. Usually a manual
SDAT download does the trick, but they are getting to be nearly 100MB in
size.

Michael Stanclift
Network Analyst
Rockhurst University

http://help.rockhurst.edu
(816) 501-4231
________________________________________
From: Cisco Clean Access Users and Administrators
[[log in to unmask]] On Behalf Of Calvin Krzywiec
[[log in to unmask]]
Sent: Monday, December 08, 2008 5:44 PM
To: [log in to unmask]
Subject: Re: McAfee & CCA

We've seen that same issue here with our enterprise version of McAfee
(VirusScan Enterprise 8.5.0i) which we require via CCA. I'm not in the
desktop/software group so I haven't spent an exorbitant amount of time
looking at it. I spent a few minutes one day troubleshooting and
verified that it was an issue with the McAfee software and not CCA. If
someone is interested, I'll try to dig up my notes. We instruct users to
download and run the latest sdat. This seems to resolve the issue for
them.

--
Cal A. Krzywiec
Network Engineer
The University of Scranton
Phone: (570) 941-6748
Email: [log in to unmask]



Kyle Torkelson wrote:
>
> We are using the Cisco rule sets and sometimes see an issue where an
> AV vendor says it's up-to-date but the CCA agent says that the user's
> AV still needs to be updated.  We most often see this issue with
> McAfee Home users and our solution is to suggest that they uninstall
> and use our Symantec Corporate AV (even though sometimes we see that
> they have purchased a 1 or 2 year renewal, which makes it harder).
> Are other CCA owners seeing this issue???  If so, what other solutions
> (if any) have you put in place???
>
>
>
> Thanks
>
>
>
> seal_sign <mailto:[log in to unmask]>
>
>
>