Table Of Contents
Support Information for Cisco NAC Appliance Agents, Release 4.5 and Later
Cisco NAC Appliance Agent System Requirements
Cisco NAC Appliance Agent/Server Version Compatibility
Cisco NAC Appliance Agent/OS/Browser Support Matrix
Cisco NAC Appliance Agent/AD Server Compatibility for AD SSO
Cisco NAC Agent Localized Language Support
Clean Access Agent Localized Language Template Support
Support Information for Cisco NAC Appliance Agents, Release 4.5 and Later
Revised: October 14, 2009, OL-18184-01This document provides the following information for Cisco NAC Appliance Release 4.5 and later:
•
Cisco NAC Appliance Agent System Requirements
•
Cisco NAC Appliance Agent/Server Version Compatibility
•
Cisco NAC Appliance Agent/OS/Browser Support Matrix
•
Cisco NAC Appliance Agent/AD Server Compatibility for AD SSO
•
Cisco NAC Agent Localized Language Support
•
Clean Access Agent Localized Language Template Support
Cisco NAC Appliance Agent System Requirements
Table 1 Minimum Requirements for Cisco NAC Appliance Agents
Cisco NAC Appliance Agent Required Hard Drive SpaceCisco NAC Agent (Windows)
15 MB
Clean Access Agent (Windows)
10 MB
Mac OS X Clean Access Agent 1
Cisco NAC Web Agent (temporal)
1 Starting from release 4.5, version 4.5.0.0 of the Mac OS X Clean Access Agent can perform posture assessment on Mac OS 10.4 and 10.5 client machines. Release 4.5 does not support Mac OS 10.2 and 10.3. See the Release Notes for Cisco NAC Appliance, Version 4.5 for details.
Cisco NAC Appliance Agent/Server Version Compatibility
Table 2 shows Clean Access Server and Agent compatibility between 4.6(1)/4.5(x)/4.1(x) CAM/CAS releases and 4.1.2.x and later Agent versions for Windows XP/Vista and Mac OS 10.4/10.5 client operating systems. Agent client versions listed as compatible can perform basic login/logout for the CAM/CAS version listed and provide the minimum features available for that Agent version or CAM/CAS version (whichever is lower). Note that the maximum AV/AS support available is determined by the maximum version of the Agent on the client as well as the maximum version of the Cisco NAC Agent or Clean Access Agent Setup/Patch (upgrade) file uploaded to the CAM. For example:
•
4.1(3) CAM/CAS with 4.1.3.0 Agent Setup file and 4.1.6.0 Agent Patch file provides 4.1.6.0 Agent AV/AS support for 4.1.6.0 clients.
•
4.1(3) CAM/CAS with 4.1.3.0 Agent Setup file and 4.5.0.0 Agent Patch file provides 4.5.0.0 Agent AV/AS support for 4.5.0.0 clients.
•
4.5 CAM/CAS with 4.5.0.0 Agent Setup file and 4.5.0.0 Agent Patch file provides 4.1.2.2 Agent AV/AS support for 4.1.2.2 clients.
•
4.6(1) CAM/CAS with 4.5.1.0 Agent Installation file provides 4.5.1.0 Agent AV/AS support for 4.5.1.0 clients.
•
A 4.5(1) CAM/CAS with 4.6.2.113 Agent Installation file provides 4.6.2.113 Agent AV/AS support for 4.6.2.113 clients, but the Agent must operate as an English-only entity—you cannot take advantage of the native operating system localization support available to Cisco NAC Agent users who are logging in to a 4.6(1) CAM/CAS network.
•
A release 4.7 FIPS 140-2 compliant CAM/CAS with the 4.7.1.x Agent Installation file provides 4.7.1.x Agent AV/AS support for 4.7.1.x Windows XP/Vista client machines
•
A release 4.7 (non-FIPS) CAM/CAS with the 4.7.1.15 Agent Installation file provides 4.7.1.x Agent AV/AS support for Windows 2000/XP/Vista client machines
•
A release 4.7 (non-FIPS) CAM/CAS with the 4.6.2.113 Agent Installation file provides 4.6.2.113 Agent AV/AS support for 4.6.2.113 clients, but the Agent must operate as an English-only entity (see above)
Note
For full 4.5 features (e.g. Mac OS X posture assessment), the 4.5.x.x Agent must be run with release 4.5 CAM/CAS.
Table 2 Cisco NAC Appliance Server/Agent Compatibility
CAM/CAS Version Cisco NAC Agent Version Clean Access Agent Version (Windows XP/Vista) 14.7
4.7.1.153
4.6.2.113
4.6.1.344.5.2.0
4.5.1.0
4.5.0.04.7.0.2
4.6.0.3
4.5.0.04.1.10.0
4.1.8.0
4.1.7.0
4.1.6.0
4.1.3.24.1.3.1
4.6(1)
4.7.1.15
4.6.2.113
4.6.1.344.5.2.0
4.5.1.0
4.5.0.04.6.0.3
4.5.0.04.1.10.0
4.1.8.0
4.1.7.0
4.1.6.0
4.1.3.24.1.3.1
4.5(1)
4.5(0)4.7.1.15
4.6.2.113 44.5.2.0
4.5.1.0
4.5.0.04.5.0.0
4.1.10.0
4.1.8.0
4.1.7.0
4.1.6.0
4.1.3.2
4.1.2.24.1.3.1
4.1.2.04.1(8) 5
4.1(6)4.7.1.15
4.6.2.113 44.5.0.0 5
4.1.10.0
4.1.8.0
4.1.7.0
4.1.6.0
4.1.3.2
4.1.2.24.1.3.1
4.1.2.04.1.3.1 5
4.7.1.15
4.6.2.113 44.5.0.0 5
4.1.7.0
4.1.6.0
4.1.3.2
4.1.2.24.1.3.1
4.1.2.0
1 The maximum available AV/AS support is determined by both the maximum version of the Clean Access Agent on the client and the maximum version of the Clean Access Agent Setup or Patch (upgrade) file uploaded to the CAM.
2 Only Mac OS X Agent 4.5.0.0 and greater provide posture assessment, remediation, and AV/AS support. Mac OS X Agent 4.1.2.0 provides authentication only; MAC OS X Agent 4.1.3.0 and greater provide authentication and auto-upgrade support. For full 4.5 feature support (e.g. Mac OS posture), the 4.5.x.x Agent must be run with the 4.5 CAM/CAS.
3 Cisco NAC Agent version 4.7.1.15 is the only Agent version that supports FIPS 140-2 compliance.
4 When you install the Cisco NAC Agent, the Agent installer automatically detects the client operating system locale and installs to match. This can break Agent-CAM/CAS communication if the CAM/CAS are not also running release 4.6(1) or later, because the Agent does not automatically default to English-only operation on the client machine, as would be required to restore successful Agent-to-CAM/CAS communication. To work around this potential issue, the user must force the English locale on the client machine after upgrading to/installing Agent version 4.6.2.113 or later on the client machine.
5 The 4.1(x) CAM/CAS cannot download 4.5.x.x and later Agents from Cisco Updates.
Cisco NAC Appliance Agent/OS/Browser Support Matrix
This section lists the operating systems, web browsers, and Java versions known to work with the Cisco NAC Appliance Agents, Version 4.5.0.0 and later.
•
Table 3 provides CAM/CAS version, Java applet, browser, and Java JRE compatibility information for Linux Fedora operating systems.
•
Table 4 provides CAM/CAS version, browser, and Java JRE compatibility information for Apple (Macintosh-based) operating systems.
•
Table 5 provides CAM/CAS version, browser, and Java JRE compatibility information for web login methods as well as the Cisco NAC Agent and Cisco NAC Web Agent that you can install and run on Windows operating systems.
•
Table 6 provides CAM/CAS version, browser, and Java JRE compatibility information for web login methods as well as the pre-release 4.6(1) Clean Access Agent and Cisco NAC Web Agent that you can install and run on Windows operating systems.
For Web Login on all operating systems, the ActiveX/Java Applet web client used for L3 MAC address/OS detection and for OOB IP refresh/renew after posture assessment is supported for the web browsers and Java versions listed in each operating system support table.
Table 3 Linux Fedora Browser/Java Support
Operating System
(English OS Language) Web Login Supported Browsers Java Version 1 CAM/ CAS L3 MAC Address (ActiveX/Applet) 2Linux Fedora 4
4.5
2.0.3.0/ 2.2.2.0
Mozilla Firefox 1.0.4
Sun JRE 1.4.2
4.5(1)
2.0.3.0/ 2.2.2.0
Mozilla Firefox 3.0.6, 2.0.0.16
Sun JRE 1.6.0_07-b06
4.5(1)
2.0.3.0/ 2.2.2.0
Mozilla Firefox 3.0.6
Sun JRE 1.6.0_12-b04
4.5(1)
2.0.3.0/ 2.2.2.0
Mozilla Firefox 3.0.4
Sun JRE 1.6.0_12-b04
1 Java version 1.5 is the minimum version required for Java Applet support.
2 For Linux OS clients, Web Login is supported in L2/L3 IB modes, and L2 OOB mode. In L3 OOB mode, the L3 MAC Address Detection Java Applet is required to obtain the MAC address of the client and refresh the IP address when necessary.
3 To support IP refresh/renew, "#Defaults requiretty" must be commented out in the /etc/sudoers file on the Linux client. If not commented, the applet used for IP refresh/renew fails with error "sudo: sorry, you must have a tty to run sudo" if the script is called by the applet. PortBounce occurs on Fedora 8/9/10 clients during the IP Refresh after authentication.
4 Supported for root and non-root users. Tested for Cisco NAC Appliance Release 4.5(1) and 4.1(8).
Table 4 Mac OS X Browser/Java Support
Operating System
(English OS Language) Web Login on CAM/CAS Supported Browsers Java Version 3Mac OS 10.5.4
4.6.0.3
4.5.0.04.7(0)
4.6(1)
4.5Safari 3.1
1.6.0_05
Mac OS 10.5.8
4.7.0.2
4.6.0.34.7(0)
4.6(1)Firefox 3.5.2, Safari 4.0.3
1.5.0_20
iPhone/iPod Touch 4
N/A
4.5
Safari (Firmware 1.1.1)
—
1 Starting from Cisco NAC Appliance Release 4.5, Mac OS X Agent 4.5.0.0 can perform posture assessment on Mac OS 10.4 and 10.5 clients. Release 4.5 does not support Mac OS 10.2, 10.3. See the Release Notes for Cisco NAC Appliance, Version 4.5 for details.
2 Starting from release 4.5, version 4.5.0.0 of the Mac OS X Clean Access Agent can perform posture assessment on Mac OS 10.4 and 10.5 client machines. Release 4.5 does not support Mac OS 10.2 and 10.3. See the Release Notes for Cisco NAC Appliance, Version 4.5 for details.
3 Java version 1.5 is the minimum version required for Java Applet support.
4 Cisco NAC Appliance recognizes iPhone/iPod Touch operating systems as "Macintosh All" and supports basic web login only if Safari (default) or Firefox browsers are used.
Table 5 Windows NAC Agent Browser/Java Support
Operating System
(English OS Language) Supported Cisco NAC Appliance Versions Supported Browsers1 Java Version 2 Cisco NAC Agent 3 Web Login Web Agent CAM/ CAS L3 MAC (ActiveX/Applet) Version Web Agent (ActiveX/Applet) 4Windows 2000, SP4
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 1.5.0.12
1.5.0_01 5
Internet Explorer 6.0
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 1.5.0.12
1.5.0_01
Internet Explorer 6.0
Windows XP Media Center Edition, SP2, SP3
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0
1.6.0_14
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
Windows XP Tablet PC, SP2, SP3
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0
1.6.0_14
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
Windows XP Home, SP2
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
—
—
Internet Explorer 6.0, 7.0
1.5.0_13
Firefox 2.0.0.27
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
—
—
Firefox 2.0.0.27
1.5.0_13
Windows XP Professional, SP2, SP3
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
Windows XP Professional x64, SP2
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 6.0, 7.0, and 8.0
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 6.0, 7.0, and 8.0
Windows Vista 6 SP1, SP2
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 7.0 and 8.0
1.6.0_14
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 7.0 and 8.0
1.6.0_14
Windows Vista x64 6 SP1, SP2
4.7.1.15
4.6.2.1134.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3 - 3.5.2
1.6.0_14
Internet Explorer 7.0 and 8.0
4.7.1.15
4.6.2.1134.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 7.0 and 8.0
1 ActiveX is only supported on the Internet Explorer browser.
2 Java version 1.5 is the minimum version required for Java Applet support.
3 Testing on international languages has been verified with ActiveX. Although Cisco believes the installer runs successfully in the foreign language with Java, this has not been verified. In the event of a Java installer issue, Cisco NAC Agent installation on international language operating systems defaults to English.
4 The temporal Cisco NAC Web Agent can be launched from the Web Login Facilitator using ActiveX from the Internet Explorer versions or via Java applet from the web browsers listed as supported for Windows systems.
5 Java version 1.4.2_15 does not work for Firefox on Windows 2000, SP4 client machines.
6 Includes all Vista operating systems (Business, Home, Ultimate, Enterprise), both Service Pack1 and Service Pack 2.
Table 6 Windows Clean Access Agent Browser/Java Support
Operating System
(English OS Language) Win Clean Access Agent 1 Web Login Web Agent Supported Browsers 2 Java Version 3 CAM/ CAS L3 MAC (ActiveX/Applet) Version Web Agent (ActiveX/Applet) 4Windows 2000, SP4 5
4.5.2.0
4.5.1.0
4.5.0.04.5
2.0.3.0/ 2.0.3.0
4.5.0.0
2.0.3.0/ 2.0.3.0
Firefox 2.0.0.8
1.6.0_07
Internet Explorer 6.0
Windows XP Tablet PC, SP2, SP3
4.5.2.0
4.5.1.0
4.5.0.04.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
4.5.2.0
4.5.1.0
4.5.0.04.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
Windows XP Professional, SP2, SP3
4.5.2.0
4.5.1.0
4.5.0.04.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
4.5.2.0
4.5.1.0
4.5.0.04.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 6.0, 7.0, and 8.0
1.6.0_14
Windows XP Professional x64, SP2
4.5.2.0
4.5.1.0
4.5.0.04.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 6.0, 7.0, and 8.0
4.5.2.0
4.5.1.0
4.5.0.04.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 6.0, 7.0, and 8.0
Windows Vista 6 SP1, SP2
4.5.2.0
4.5.1.0
4.5.0.04.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 7.0 and 8.0
1.6.0_14
4.5.2.0
4.5.1.0
4.5.0.04.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_11
Internet Explorer 7.0 and 8.0
1.6.0_14
Windows Vista x64 6 SP1, SP2
4.5.2.0 7
4.5.1.0
4.5.0.04.7(0)
2.3.0.0/ 2.2.2.0
4.7.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 7.0 and 8.0
4.5.2.0
4.5.1.0
4.5.0.04.6(1)
2.3.0.0/ 2.2.2.0
4.6.0
2.3.0.0/ 2.2.2.0
Firefox 3.0.3
1.6.0_14
Internet Explorer 7.0 and 8.0
1 The Clean Access Agent only fully supports authentication/posture assessment/remediation on 32-bit operating systems. Any client OS not listed is not supported, even if the Agent can be installed on the client (e.g. Embedded XP is not supported).
2 ActiveX is only supported on the Internet Explorer browser.
3 Java version 1.5 is the minimum version required for Java Applet support.
4 The temporal Cisco NAC Web Agent can be launched from the Web Login Facilitator using ActiveX from the Internet Explorer versions or via Java applet from the web browsers listed as supported for Windows systems.
5 Agent (4.1.3.0 or later) login to Windows 2000 system with Local DB authentication to CAM and requirements configured requires a system restart. See the Release Notes for Cisco NAC Appliance, Version 4.5 for details.
6 Includes all Vista operating systems (Business, Home, Ultimate, Enterprise), both Service Pack1 and Service Pack 2.
7 Clean Access Agent/Cisco NAC Web Agent support authentication only on 64-bit Windows systems. The Agent does not perform posture assessment or Nessus scanning. To support x64 Windows, the CAM/CAS/Agent must all be running same release (e.g. 4.5/4.5.0.0).
Cisco NAC Appliance Agent/AD Server Compatibility for AD SSO
Cisco NAC Appliance supports Windows Single Sign-On (SSO) on Windows Vista/XP/2000 client machines and Active Directory on Windows 2000/2003/2008 Servers, as shown in Table 7.
Note
64-bit versions of Windows Server 2008 are not supported.
Cisco NAC Web Agent does not support SSO functions.
Table 7 Cisco NAC Appliance Support for Windows Active Directory SSO
CAM/CAS Version Active Directory (AD) Servers 1 ktpass.exe Version Required Client Machines 2 FIPS 140-2 Compliant4.7
6.0.6001.18000
Windows Vista 5
Non-FIPS4.7
4.6(1)
4.5(x)
4.1(8)
4.1(6)
4.1(3)+•
Windows 2000 Server SP4
•
Windows 2003 Enterprise SP1
•
Windows 2003 Enterprise R2 SP2
•
Windows 2003 Standard SP1 6
5.2.3790.0
•
Windows 2000 SP4
•
Windows XP Professional SP2, SP3
•
Windows Vista
4.7
4.6(1)
4.5(1)
4.1(8)Windows 2008 Server Enterprise SP1 3
6.0.6001.18000
1 64-bit versions of Windows 2003 Enterprise are not supported.
2 AD SSO requires the Cisco NAC Agent to be installed on client systems (for example, you cannot use a Linux Kerberos client for AD SSO with Cisco NAC Appliance.)
3 Single Domain AD SSO is supported on Windows 2008 Enterprise SP1. Windows 2008 Server Standard has not been tested. 64-bit versions of Windows Server 2008 are not supported.
4 To support AD SSO on the Windows 2008 server, you must:
- Apply Microsoft Windows Hotfix KB951191 (http://support.microsoft.com/kb/951191)
- Use the native Windows 2008 KTPass tool
- (Optional) Issue the KTPass command using a slash (/) instead of a dash (-), as instructed in the Microsoft TechNet support page (http://technet.microsoft.com/en-us/library/cc753771.aspx) The following illustrates an example command:
C:\Program Files\Support Tools> ktpass.exe /princ sanac/TestAD01.testdom.com@TESTDOM.COM /mapuser sanac /pass 123456sS /out c:\casuser.keytab /ptype KRB5_NT_PRINCIPAL +DesOnly
For additional information, refer to the "Configuring Active Directory Single Sign-On (AD SSO)" chapter of the Cisco NAC Appliance - Clean Access Server Installation and Configuration Guide. See CSCsy45780 for further details.5 Users logging into Cisco NAC Appliance via AD SSO must be running Windows Vista and have the latest Cisco NAC Agent (version 4.7.1.x) installed on their client machine in order to remain FIPS-compliant. Windows XP clients performing AD SSO do not conform to FIPS 140-2 compliance requirements.
6 Windows 2003 Standard without SP1 is not supported.
Cisco NAC Agent Localized Language Support
Cisco NAC Agent version 4.6.2.113 and later provides native localization support of user-facing dialog text and messages. The Agent determines the correct language template based on the local computer Locale (under Control Panel > Regional and Language Options), unless you explicitly disable this function by setting the "Locale" parameter in the Agent configuration XML file. The Agent also provides MultiByte Character Support (MBCS) for posture assessment and remediation on "double-byte" language operating systems. The following languages are supported:."
Note
If you use the latest version of the Cisco NAC Agent, but leave your CAM/CAS at release 4.5(1) or earlier, Agent connect-time information (e.g. remediation requirement names and descriptions) are English-only—users lose the advantage of the native operating system localization support available to Cisco NAC Agent users who are logging in to a 4.6(1) and later CAM/CAS network.
Clean Access Agent Localized Language Template Support
The Clean Access Agent determines the correct language template based on the local computer Locale (under Control Panel > Regional and Language Options). Agent language template support only controls what the viewer sees after the Agent is installed; it does not include support for different client operating systems for the Agent Installer or for AV/AS products.
Version 4.5.x.x of the Clean Access Agent supports the following localized language templates:
Catalan
Finnish
International English
Serbian
Czech
French
Italian
Spanish
Danish
French (Canada)
Norwegian
Swedish
Dutch
German
Portuguese
Turkish
English
Hungarian
Russian
Note
For the Russian localized template, the Agent must run on Russian Windows to be able display all characters correctly.
Supported OS Locales
All languages supported for language templates are also supported for OS Locales. Japanese is also supported as an OS Locale. With OS Locale support, the Clean Access Agent installs/authenticates on the Windows language version (e.g. German Windows or Japanese Windows) but displays all information and instructions in English.
Note
For details on the Clean Access Agent for Release 4.1(x) and earlier, refer to Supported Hardware and System Requirements for Cisco NAC Appliance (Cisco Clean Access).

