Nate Austin from Cisco emailed this to me last week (I've still heard nothing from my actual assigned TAC engineer) -- this fix does indeed work and solved all of our remaining 4.1.3.0/4.1.3.1 agent issues.
Michael Stanclift Network Analyst Rockhurst University Conway Hall, Office 415 1100 Rockhurst Road Kansas City, Missouri 64110 (816) 501-4231 -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Robert J. Quigley Sent: Monday, January 28, 2008 6:50 AM To: [email protected] Subject: Re: 4.1.3 problems (was Norton 2008) Regarding the 4.1.3 agent hanging validating user requirements, I just received this from TAC: Bob, A bug has been filed on your issue today. The bug ID is CSCsm39238. It is not online yets but the following is the contents of the bug report. Let me know how you want me to proceed with this case. <B>Symptom:</B>In 4.1.3 and 4.1.3.1 agents, clients that fail requirements may get hung at the Login Screen with "Validating Requirements... Please Wait" showing on the agent. Users that pass all requirements are fine. <B>Conditions:</B>This occurs when the session timer for the agent Temporary Role is set to "Disabled", and when the user fails a requirement. <B>Workaround:</B>Browse on the CAM to User Management > User Roles > Schedule > Session Timer, and set the Session Timeout value for the Temporary Role equal to a positive integer value. The agent will allow that amount of time for the user to remediate. <B>Further Problem Description:</B>In prior agent versions, the agent interpreted Disabled to mean unlimited time. However in 4.1.3.x the agent seems to interpret this as "0" and when the user fails a requirement, they get stuck because they have 0 seconds to remediate. The remediation screen never pops up, and the user is stuck on the login screen. Bob Quigley Youngstown State University -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Bruce Locke Sent: Thursday, January 24, 2008 11:46 AM To: [email protected] Subject: Re: 4.1.3 problems (was Norton 2008) Eric Kenny wrote: > Chris, Nate, > > Being the other person (of 2 total) that has CSCsl98060 attached to > their case, I am really surprised more people didnt notice this. From the ticket: "Because the thread for Vlan Detection is in very low priority and it yields other threads to use the CPU first. I tested my Mac with one MPEG 4 movie playing in iTune, the CPU load peak of the Mac agent reduced to 91% instead of 100.4%. If I have two movies playing at the same time, the peak of the CPU load for the Mac agent even lowered to 68%. The more applications running, the less CPU load the Mac agent will use. In other words, end users will not notice any slow down or performance issue when running other applications simultaneously. However, one thing the end users may notice could be the increase of the power consumption when running on battery since the CPU load increases to around 100% every 5 seconds when there is no CPU intense application running." Hell, it's not like most Mac users we have are laptop users and we use CCA for wireless now eh? Who cares about a badly behaving app on modern systems that try to aggressively control power usage? I for one like a warm toasty lap! This trolling is brought to you by the word "FIXED". -- Bruce A. Locke [EMAIL PROTECTED] HAB 50 - (845) 257-3809 Network Administrator Computer Services State University of New York at New Paltz
