Whittier Law School Law Library
Cisco NAC Agent Wireless Installation Guide
For Microsoft Windows
In order to access the wireless network on campus, Microsoft Windows laptop users must go through
the “Cisco NAC (Network Admission Control)” server which formerly was called “Cisco Clean Access
Agent”. This server will ensure all computers connected to the law school’s network have all Microsoft
Windows security updates from Microsoft and up-to-date anti-virus software such as Norton Antivirus,
McAfee Antivirus or free software such as Microsoft Security Essentials.
Two mandatory requirements must be met: (1) up-to-update anti-virus software and (2)
Microsoft Windows must be updated.
• If your laptop does not meet one or more of these requirements, “Cisco NAC Agent” will not let you
access the wireless network until you update your Microsoft Windows and your anti-virus software.
• If your laptop is up-to-date, you will be allowed full access to the wireless network. You will be
prompted to login with your my.whittier user ID and password.
Follow the instructions below for first-time users only
Prerequisite:
• Latest Java plug-in must be installed on your laptop. Download the current version from
www.java.com
• Up-to-date anti-virus software and definition file.
• Microsoft Windows must be updated.
• Connect to WLS_wireless Wi-Fi network. This is for students and staff. Do not select
WLS_Guest. This network is reserved for visiting guest users.
1) To install the “Cisco NAC Agent”, simply open Internet Explorer
, FireFox
, Chrome
any other web browsers. It will automatically redirect you to the “Cisco NAC Agent” server.
or
2) Login with your my.whittier user ID and password. Make sure “Provider” is set to “Wireless LDAP”.
Then click on the “Continue” button.
Last updated: 08/03/2014
Page 1
If you do not see this login screen, it is likely you are not connected to the law school wireless network,
or you have installed a third-party firewall, such as Norton Internet Security, blocking the server. You
must disable it first or allow the Cisco server been blocked. Close the web browser and see page 13
for troubleshooting, under the heading “Not Connecting to WLS_wireless Network.”
3) Click on “Launch Cisco NAC Windows Agent” button.
4a) For Internet Explorer users
4b) For Firefox users
4c) For Firefox users
, click on “Install”. Skip steps 4b to 4d and proceed step 5.
, click Cancel to close out the warning message.
, you need to save the file on your laptop.
Last updated: 08/03/2014
Page 2
4c) For Firefox users
, you need to locate the saved file on your laptop and double click on it. It is
saved in the default Downloads folder. Then Click on Run.
4d) When you see the User Account Control dialog box, click Yes to install. Cicso NAC Agent should be
installing on you laptop.
5) For Internet Explorer users
Last updated: 08/03/2014
, click Allow button.
Page 3
6) Click on the Next button to install.
7) Agree to the license terms and click on the Next button.
8) Click on the Next button when you see the install shield wizard screen.
Last updated: 08/03/2014
Page 4
9) Click on the Install button.
10) When you see the User Account Control dialog box, click Yes to install. Cicso NAC Agent should be
installing on you laptop.
11) Click on the Finish button.
Last updated: 08/03/2014
Page 5
12) You should see Cisco NAC Agent was successfully installed!
13) Close your web browser. Click OK to install update module if needed.
Last updated: 08/03/2014
Page 6
Logon to the Wireless Network
14) The “Cisco NAC Agent” logon screen appears. Logon with your my.whittier user ID and password.
Then click on the “Log In” button.
15) During this time, your laptop is scanned for current versions of Microsoft Windows updates and antivirus software and definition files. If your computer is not up-to-date, you will be granted only
Temporary Network Access. This will allow you to update either Windows updates or virus
definition file.
Last updated: 08/03/2014
Page 7
16) If you already have an anti-virus program installed, you must update your definition file first
before you can gain full Internet access. You have a three hour limit to do this. Click on the Repair
button.
If you do not have a virus scan software installed on your laptop, see page 10 to get law school’s
site licensed virus scan software for free.
The screen below shows a message that it needs an anti-virus software and updates when you click on
show details.
Last updated: 08/03/2014
Page 8
17) Click on the Update button. It will take a few minutes to complete the updates.
18) Once your laptop has been updated, click on the OK button. Now you have full Internet access.
Last updated: 08/03/2014
Page 9
No Virus Scan Installed
If you do not have an anti-virus software installed, you can install the law school’s site licensed McAfee
VirusScan Enterprise.
Click Go To Link. It connects to the download page for installation of the licensed McAfee VirusScan
Enterprise. See separate handout for detail instructions. Then continue the steps on page 8 for
updating the virus scan definition file.
Last updated: 08/03/2014
Page 10
To logout and exit Cisco NAC Agent
1) Right click on Key icon on the system tray (systray).
2) Select “Logout”. Right click on Key icon again then select “Exit”. If you do not “Exit,” the logon
screen will always appear.
Now you have logged off the wireless network.
Last updated: 08/03/2014
Page 11
To Log back into the wireless network
Double click on the “Cisco NAC Agent” icon on the desktop and logon again.
Troubleshooting, Common Problems and FAQ
Two Requirements for Connecting the Wireless
If you cannot login to the law school wireless network, it is because your laptop has not fulfilled the two
mandatory requirements:
(1) Your anti-virus software is outdated or not supported by Cisco NAC Agent (Network Admission
Control).
(2) Your Microsoft Windows has not been updated with critical security patches and hot fixes.
Make sure you have purchased a legal copy of Microsoft Windows and not a pirated copy. Microsoft
will periodically check the copy of Windows on your computer to make sure it is a genuine copy. If you
have a fake copy, it may not work with Cisco NAC Agent.
Cannot Download Cisco NAC Agent
For some reason, if you cannot download the “Cisco NAC Agent” on your laptop, try disabling your
firewall temporarily if you are using third-party software like Norton Internet Security.
Also check your Internet Protocol [TCP/IP] setting for your IP address. See page 17 for instructions.
Then return to this page for further troubleshooting.
Last updated: 08/03/2014
Page 12
Not Connecting to WLS_wireless Network
If you see the screen below, this means you are not connecting to the law school wireless network.
(IE users see this)
(Firefox users see this)
WLS_wireless network is for students and staff. If you try to connect to any other network, you will not
be able to logon. To connect, fellow the steps below:
If you see the above icon in the systray, click on the wireless signal bar and select WLS_wireless. Do
not select WLS_Guest. This network is reserved for visiting guest users.
Last updated: 08/03/2014
Page 13
Click on Connect button. You can select the box to connect automatically to the law school network.
Once you have connected to WLS_wireless network, go back to page 1 - step 1 and launch the web
browser again.
If you have tried the above steps unsuccessfully, please visit the Law Library front desk and ask for an
IT staff person for assistance.
To Check Your Wireless Connection
Go to the Control Panel – Network and Sharing Center.
You will see the above screen. The wireless network is called WLS_wireless. If you get any other
connections, you are not connected to the Whittier Law School wireless network.
Last updated: 08/03/2014
Page 14
Anti-virus Software FAQ
Q: I don’t have an anti-virus software on my laptop. Is there a free version I can download so I don’t
have to purchase one?
A: Whittier Law School has purchased McAfee VirusScan Enterprise site license for current students.
Students can install this software on your laptop for free. See page 10.
You can use the free “Microsoft Security Essentials” anti-virus from Microsoft. Download at:
windows.microsoft.com/en-us/windows/security-essentials-download
Once you have downloaded and installed it, you need to run the update for it. If you cannot update it
via wireless, you need to manually run the update via an Ethernet cable (CAT-5) before logon to “Cisco
NAC Agent” again.
There are numerous free anti-virus programs available on the Internet, but the law school only tested
with Microsoft Security Essentials on Windows 7 and Windows 8.
Q: My anti-virus software on my laptop has expired. Can I get the school’s licensed software and not
renew the subscription service or purchase a new version?
A: Yes. You need to uninstall your current anti-virus software before you can install McAfee VirusScan
Enterprise. You cannot have both programs installed at the same time on your computer.
Q: I have an anti-virus software but I cannot logon to Cisco Clean Access. It is current and updated.
Why can’t I get in?
A: Cisco NAC Agent supports most but not all of the anti-virus software on the market. If you have
installed a brand new version of Norton Antivirus program for example and cannot logon, it is because
Cisco is behind in their software client development. The software is too new for Cisco NAC Agent to
Last updated: 08/03/2014
Page 15
validate. Once the Cisco software engineer has an update, it will automatically download an updated
client on your laptop computer.
If you still want to connect, you need to uninstall your current anti-virus software and install the law
school site licensed anti-virus software. The software works. We have tested it.
Q: I was able to logon to the wireless network last week without any problem. Now I have temporary
access and I can’t access the Internet. Why not?
A: Your Microsoft Windows does not have the most current critical updates or your anti-virus software
definitions file is outdated. If the creation date is more than five days old, it is considered as out-dated.
See page 8 for updating. Click on the Update button to update either or both Windows and anti-virus
software within the three hour limit. Once it has been updated, you should be able to logon to the
wireless network.
Cisco NAC Clean Access Supported Anti-Virus
You can check your anti-virus software compatibility with Cisco by reviewing their release notes. It is in
PDF format. Visit the link below:
www.cisco.com/en/US/products/ps6128/prod_release_notes_list.html
If it is not supported, install the law school’s licensed software or use one on the list.
SSL Certificate Revocation Error
If you get an SSL certificate REV failed [12057] error when you try to logon, follow the steps below:
• Go into the Control Panel.
• Double click on Internet Options.
• Click on Advanced tab.
• Find the Check for server certificate revocation option box and uncheck it. Then login again with your
my.whittier user ID and password.
Last updated: 08/03/2014
Page 16
Internet Protocol [TCP/IP] (IP Address)
Q: This is my first time downloading Cisco NAC Agent on my laptop and it never redirected me to the
Whittier Law School Wireless Network Login download web page. Why not?
A: Make sure Internet Protocol [TCP/IP] is set to Obtain an IP address and DNS server address
automatically. If you have an embedded IP address, you must remove it.
Warning: If you need the IP address on your computer in order to use your Internet at
home, you need to make a note of the IP address before you remove it. Whittier Law
School is not responsible for any lost Internet connection at home or at your
workplace.
To change your IP address, you need to go to the Control Panel.
• Click on Network and Sharing Center. Click Change adapter settings. Then right click on Local Area
Connection and select Properties. See Figure 1.
• Find Internet Protocol Version 4 (TCP/IP). Then click on Properties. See Figure 2 on page 18.
• Select obtain an IP address automatically and DNS server address automatically. See Figure 3 on
page 18.
Note: Screen layouts are different between Microsoft Windows 7 and Windows 8. The screens below
are from Microsoft Windows 7 Professional. You are responsible for the version of Microsoft Windows
operating system on your laptop.
Figure 1
Last updated: 08/03/2014
Page 17
Figure 2
Figure 3
Error 1935 occurred during the installation
If you get an “Error 1935” installing the Cisco NAC Agent for the first time or updating the NAC Agent
version, try start or restarting the two services in Windows.
Screen shots on page 19 are from Windows 7. Windows 8 screens are different.
Last updated: 08/03/2014
Page 18
1) Click on the Start button and then move the
mouse to the Control Panel.
2) Select System and Security.
3) Select Administrative Tools.
4) Select Services.
5) Select Windows Installer and click on Start the
service.
6) Select Windows Modules Installer and click on
Restart the service.
Once the two services have been restarted, try reinstalling the Cisco NAC agent Application again.
Last updated: 08/03/2014
Page 19