What is most annoying about Cisco Clean Access?

If it’s anything like Websense, then I hate it. My school recently blocked all freeware downloads.

Oh yeah, my school has that too… :(

Cisco Clean Access is a system that ensures that a client computer meets certain requirements before accessing resources. It does not filter content. We used it at a prior workplace to make sure that any machine which accessed our corporate network had valid antivirus software installed and updated with a pattern that was no older than 14 days. It can be expanded to ensure that an operating system has a specific set of patches installed before access is granted. The ultimate goal is to keep out machines that may be infected with who knows what or to ensure that OS’s stay patched.

I can tell you from direct experience that it is extremely complex and requires a tremendous amount of planning and experience to implement properly. Especially on any scale above a couple hundred clients.

I’m curious though as to why you would pen a satirical piece about CCA? It’s a damn fine product when properly implemented and provides tremendous protection and peace of mind regarding access to enterprise networks.

It’s a school project. And I hate it (not only is our school much bigger than a couple hundred clients, we have a tech staff of 3 people, and they also have other responsibilities (teacher, sports coach, etc). Our Clean Access NEVER works. And it can be completely circumvented fairly easily (w/o a username and password, and not a hack)...it is a huge bother.

The idea of it seems solid, but in practice? No. For example, I use linux and am completely unable to use the internet at all (no, the admins do not allow MAC address workaround). Same thing with game consoles, etc.

@shared3, my thought is that the satire should be on your school’s tech team…