Guest

Cisco NAC Appliance (Clean Access)

Field Notice: FN - 63204 - Cisco Clean Access has Interoperability issue with Symantec Anti-virus - delays Agent start-up

Field Notice: FN - 63204 - Cisco Clean Access has Interoperability issue with Symantec Anti-virus - delays Agent start-up

February 16, 2009


NOTICE:

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision Date Comment
1.0
16-FEB-2009
Initial Public Release

Products Affected

Products Affected
CCA AGENT - 3.2
CCA AGENT - 3.3
CCA AGENT - 3.4
CCA AGENT - 3.5
CCA AGENT - 3.6
CCA AGENT - 4.0
CCA AGENT - 4.1
CCA AGENT - 4.5

Problem Description

When using Symantec Anti-Virus software and the Cisco Clean Access Agent - with realtime scanning enabled - Symantec Anti-Virus QuickScan will delay the initial pop-up for the Agent from running. With AV detection, the agent takes 2-4 minutes to popup. This has also been seen on Windows XP, but is more prevalent on Vista.

Product Type : AntiVirus (NortonAV)
Product Name : Symantec AntiVirus
Product Ver. : 10.2.0.276
Def Ver. : 11/6/2006 rev. 64
Def Date : 11/6/2006

Also please referrence
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008111414031848

Background

Interoperability testing has brought this issue to the attention of Cisco Clean Access software development group.

Problem Symptoms

The Cisco Clean Access Agent login screen is delayed/very slow to pop up and will ask for login credentials.

Workaround/Solution

The following workaround should be used:

Exclude the Clean Access Agent AV411 directory from Symantec Antivirus scanning. See http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008111414031848

DDTS

To follow the bug ID link below and see detailed bug information, you must be a registered customer and you must be logged in.

DDTS Description
CSCsr90712 (registered customers only) Symantec Antivirus delays Clean Access Agent startup

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.