Whittier Law School Law Library Cisco NAC Agent Wireless Installation Guide For Microsoft Windows In order to access the wireless network on campus, Microsoft Windows laptop users must go through the Cisco NAC (Network Admission Control) server which formerly was called Cisco Clean Access Agent. This server will ensure all computers connected to the law school s network have all Microsoft Windows security updates from Microsoft and up-to-date anti-virus software such as Norton Antivirus, McAfee Antivirus or free software such as Microsoft Security Essentials. Two mandatory requirements must be met: (1) up-to-update anti-virus software and (2) Microsoft Windows must be updated. If your laptop does not meet one or more of these requirements, Cisco NAC Agent will not let you access the wireless network until you update your Microsoft Windows and your anti-virus software. If your laptop is up-to-date, you will be allowed full access to the wireless network. You will be prompted to login with your my.whittier user ID and password. Follow the instructions below for first-time users only Prerequisite: Latest Java plug-in must be installed on your laptop. Download the current version from www.java.com Up-to-date anti-virus software and definition file. Microsoft Windows must be updated. Connect to WLS_wireless Wi-Fi network. This is for students and staff. Do not select WLS_Guest. This network is reserved for visiting guest users. 1) To install the Cisco NAC Agent, simply open Internet Explorer, FireFox, Chrome or any other web browsers. It will automatically redirect you to the Cisco NAC Agent server. 2) Login with your my.whittier user ID and password. Make sure Provider is set to Wireless LDAP. Then click on the Continue button. Last updated: 08/03/2014 Page 1
If you do not see this login screen, it is likely you are not connected to the law school wireless network, or you have installed a third-party firewall, such as Norton Internet Security, blocking the server. You must disable it first or allow the Cisco server been blocked. Close the web browser and see page 13 for troubleshooting, under the heading Not Connecting to WLS_wireless Network. 3) Click on Launch Cisco NAC Windows Agent button. 4a) For Internet Explorer users, click on Install. Skip steps 4b to 4d and proceed step 5. 4b) For Firefox users, click Cancel to close out the warning message. 4c) For Firefox users, you need to save the file on your laptop. Last updated: 08/03/2014 Page 2
4c) For Firefox users, you need to locate the saved file on your laptop and double click on it. It is saved in the default Downloads folder. Then Click on Run. 4d) When you see the User Account Control dialog box, click Yes to install. Cicso NAC Agent should be installing on you laptop. 5) For Internet Explorer users, click Allow button. Last updated: 08/03/2014 Page 3
6) Click on the Next button to install. 7) Agree to the license terms and click on the Next button. 8) Click on the Next button when you see the install shield wizard screen. Last updated: 08/03/2014 Page 4
9) Click on the Install button. 10) When you see the User Account Control dialog box, click Yes to install. Cicso NAC Agent should be installing on you laptop. 11) Click on the Finish button. Last updated: 08/03/2014 Page 5
12) You should see Cisco NAC Agent was successfully installed! 13) Close your web browser. Click OK to install update module if needed. Last updated: 08/03/2014 Page 6
Logon to the Wireless Network 14) The Cisco NAC Agent logon screen appears. Logon with your my.whittier user ID and password. Then click on the Log In button. 15) During this time, your laptop is scanned for current versions of Microsoft Windows updates and antivirus software and definition files. If your computer is not up-to-date, you will be granted only Temporary Network Access. This will allow you to update either Windows updates or virus definition file. Last updated: 08/03/2014 Page 7
16) If you already have an anti-virus program installed, you must update your definition file first before you can gain full Internet access. You have a three hour limit to do this. Click on the Repair button. If you do not have a virus scan software installed on your laptop, see page 10 to get law school s site licensed virus scan software for free. The screen below shows a message that it needs an anti-virus software and updates when you click on show details. Last updated: 08/03/2014 Page 8
17) Click on the Update button. It will take a few minutes to complete the updates. 18) Once your laptop has been updated, click on the OK button. Now you have full Internet access. Last updated: 08/03/2014 Page 9
No Virus Scan Installed If you do not have an anti-virus software installed, you can install the law school s site licensed McAfee VirusScan Enterprise. Click Go To Link. It connects to the download page for installation of the licensed McAfee VirusScan Enterprise. See separate handout for detail instructions. Then continue the steps on page 8 for updating the virus scan definition file. Last updated: 08/03/2014 Page 10
To logout and exit Cisco NAC Agent 1) Right click on Key icon on the system tray (systray). 2) Select Logout. Right click on Key icon again then select Exit. If you do not Exit, the logon screen will always appear. Now you have logged off the wireless network. Last updated: 08/03/2014 Page 11
To Log back into the wireless network Double click on the Cisco NAC Agent icon on the desktop and logon again. Troubleshooting, Common Problems and FAQ Two Requirements for Connecting the Wireless If you cannot login to the law school wireless network, it is because your laptop has not fulfilled the two mandatory requirements: (1) Your anti-virus software is outdated or not supported by Cisco NAC Agent (Network Admission Control). (2) Your Microsoft Windows has not been updated with critical security patches and hot fixes. Make sure you have purchased a legal copy of Microsoft Windows and not a pirated copy. Microsoft will periodically check the copy of Windows on your computer to make sure it is a genuine copy. If you have a fake copy, it may not work with Cisco NAC Agent. Cannot Download Cisco NAC Agent For some reason, if you cannot download the Cisco NAC Agent on your laptop, try disabling your firewall temporarily if you are using third-party software like Norton Internet Security. Also check your Internet Protocol [TCP/IP] setting for your IP address. See page 17 for instructions. Then return to this page for further troubleshooting. Last updated: 08/03/2014 Page 12
Not Connecting to WLS_wireless Network If you see the screen below, this means you are not connecting to the law school wireless network. (IE users see this) (Firefox users see this) WLS_wireless network is for students and staff. If you try to connect to any other network, you will not be able to logon. To connect, fellow the steps below: If you see the above icon in the systray, click on the wireless signal bar and select WLS_wireless. Do not select WLS_Guest. This network is reserved for visiting guest users. Last updated: 08/03/2014 Page 13
Click on Connect button. You can select the box to connect automatically to the law school network. Once you have connected to WLS_wireless network, go back to page 1 - step 1 and launch the web browser again. If you have tried the above steps unsuccessfully, please visit the Law Library front desk and ask for an IT staff person for assistance. To Check Your Wireless Connection Go to the Control Panel Network and Sharing Center. You will see the above screen. The wireless network is called WLS_wireless. If you get any other connections, you are not connected to the Whittier Law School wireless network. Last updated: 08/03/2014 Page 14
Anti-virus Software FAQ Q: I don t have an anti-virus software on my laptop. Is there a free version I can download so I don t have to purchase one? A: Whittier Law School has purchased McAfee VirusScan Enterprise site license for current students. Students can install this software on your laptop for free. See page 10. You can use the free Microsoft Security Essentials anti-virus from Microsoft. Download at: windows.microsoft.com/en-us/windows/security-essentials-download Once you have downloaded and installed it, you need to run the update for it. If you cannot update it via wireless, you need to manually run the update via an Ethernet cable (CAT-5) before logon to Cisco NAC Agent again. There are numerous free anti-virus programs available on the Internet, but the law school only tested with Microsoft Security Essentials on Windows 7 and Windows 8. Q: My anti-virus software on my laptop has expired. Can I get the school s licensed software and not renew the subscription service or purchase a new version? A: Yes. You need to uninstall your current anti-virus software before you can install McAfee VirusScan Enterprise. You cannot have both programs installed at the same time on your computer. Q: I have an anti-virus software but I cannot logon to Cisco Clean Access. It is current and updated. Why can t I get in? A: Cisco NAC Agent supports most but not all of the anti-virus software on the market. If you have installed a brand new version of Norton Antivirus program for example and cannot logon, it is because Cisco is behind in their software client development. The software is too new for Cisco NAC Agent to Last updated: 08/03/2014 Page 15
validate. Once the Cisco software engineer has an update, it will automatically download an updated client on your laptop computer. If you still want to connect, you need to uninstall your current anti-virus software and install the law school site licensed anti-virus software. The software works. We have tested it. Q: I was able to logon to the wireless network last week without any problem. Now I have temporary access and I can t access the Internet. Why not? A: Your Microsoft Windows does not have the most current critical updates or your anti-virus software definitions file is outdated. If the creation date is more than five days old, it is considered as out-dated. See page 8 for updating. Click on the Update button to update either or both Windows and anti-virus software within the three hour limit. Once it has been updated, you should be able to logon to the wireless network. Cisco NAC Clean Access Supported Anti-Virus You can check your anti-virus software compatibility with Cisco by reviewing their release notes. It is in PDF format. Visit the link below: www.cisco.com/en/us/products/ps6128/prod_release_notes_list.html If it is not supported, install the law school s licensed software or use one on the list. SSL Certificate Revocation Error If you get an SSL certificate REV failed [12057] error when you try to logon, follow the steps below: Go into the Control Panel. Double click on Internet Options. Click on Advanced tab. Find the Check for server certificate revocation option box and uncheck it. Then login again with your my.whittier user ID and password. Last updated: 08/03/2014 Page 16
Internet Protocol [TCP/IP] (IP Address) Q: This is my first time downloading Cisco NAC Agent on my laptop and it never redirected me to the Whittier Law School Wireless Network Login download web page. Why not? A: Make sure Internet Protocol [TCP/IP] is set to Obtain an IP address and DNS server address automatically. If you have an embedded IP address, you must remove it. Warning: If you need the IP address on your computer in order to use your Internet at home, you need to make a note of the IP address before you remove it. Whittier Law School is not responsible for any lost Internet connection at home or at your workplace. To change your IP address, you need to go to the Control Panel. Click on Network and Sharing Center. Click Change adapter settings. Then right click on Local Area Connection and select Properties. See Figure 1. Find Internet Protocol Version 4 (TCP/IP). Then click on Properties. See Figure 2 on page 18. Select obtain an IP address automatically and DNS server address automatically. See Figure 3 on page 18. Note: Screen layouts are different between Microsoft Windows 7 and Windows 8. The screens below are from Microsoft Windows 7 Professional. You are responsible for the version of Microsoft Windows operating system on your laptop. Figure 1 Last updated: 08/03/2014 Page 17
Figure 2 Figure 3 Error 1935 occurred during the installation If you get an Error 1935 installing the Cisco NAC Agent for the first time or updating the NAC Agent version, try start or restarting the two services in Windows. Screen shots on page 19 are from Windows 7. Windows 8 screens are different. Last updated: 08/03/2014 Page 18
1) Click on the Start button and then move the mouse to the Control Panel. 2) Select System and Security. 3) Select Administrative Tools. 4) Select Services. 5) Select Windows Installer and click on Start the service. 6) Select Windows Modules Installer and click on Restart the service. Once the two services have been restarted, try reinstalling the Cisco NAC agent Application again. Last updated: 08/03/2014 Page 19