CCA Home > Getting Started with Clean Access

Telecommunications has implemented the Cisco Clean Access network security system in all residence halls and the wireless network. The main features of this system include user authentication, vulnerability assessment and remediation. In other words, the system requires users to log in and checks the computer for viruses and other vulnerabilities before granting full network access. Here's the basic flow:

If your computer is compliant, you will simply provide your BSC Username and password to gain network access. If clean access discovers that your computer is not-compliant, you are provided instructions for obtaining the necessary patch/fix in order to make your computer compliant.

Although accessing the network via Cisco Clean Access should be a simple and self-explanatory procedure, a detailed description of the process is provided on the Cisco Clean Access Agent FAQ

User Authentication

User Authentication simply means that you need to provide proper credentials (i.e. your Bridgewater State College username and password) in order to gain access to the network. There are two methods of User Authentication, Web Login and Clean Access Agent

Web Login

Open any web browser, and you will be redirected to the authentication page. Web Login is the user authentication method for all non-Windows based computers. Users running Windows 98 or higher are required to authenticate using the Clean Access Agent.

Clean Access Agent

If you do not have Clean Access Agent, you will be prompted to download and install it from the Web Login page. Clean Access Agent is also available from the http://download.bridgew.edu website. Once Clean Access Agent is installed, the login window will appear automatically whenever your computer attempts to access the network. Enter your Bridgewater State College UserID and password and click Login. (Note: The authentication provider should be BSC)

If the Clean Access Agent log in window doesn't appear automatically, you may have an firewall installed (e.g. Norton Internet Security) thats prevents the window from opening. To bypass this problem, modify your firewall rules to allow Clean Access Agent (port 8905). The method for modifying firewall rules vary depending on the firewall you use.

Vulnerability Assessment

After you successfully log into the system, Clean Access checks your computer for vulnerabilities to make sure it meets the necessary security requirements for connecting to the network. Only compliant computers are granted full network access. Sunday night at 3am, machine validations will be cleared, and all machines will be required to login again.

What are the requirements for accessing the network?

It's possible that the minimum requirements may vary from time to time in order to remain proactive in preventing new viruses and trojans from infiltrating the network. All students are accountable for keeping their computer updated with current antivirus software and all operating system security patches.

Current requirements for accessing the BSC network are located on the main page of this site.

If no vulnerabilities are found, your computer is considered compliant and is granted full network access. If vulnerabilities are found, your computer is moved into remediation.

Remediation

If your computer fails the vulnerability assessment, it is moved into remediation, and you are provided with directions for fixing/patching it. You are given temporary network access in order to download any necessary software. Clean Access makes the distinction between REQUIRED and OPTIONAL software.

Missing REQUIRED Software

Required software must be installed before your computer will be granted network access. If your computer is missing required software, you'll see a message like this:

Missing OPTIONAL Software

At times, Clean Access may notify you of optional software your computer is missing. If your computer is missing optional software, you'll see a message like this: In this example, the message does NOT mean you need to install Microsoft AntiSpyware in order to gain network access. If you are already running AntiSpyware tools, simply click Next in order to gain access to the Internet.

If you'd like to download and install the optional software, click the Go To Link (or Download) button.

Removing the Clean Access Agent

If you connect your computer to the Internet somewhere other than on campus, the Clean Access Agent is not required and simply will not appear. However, if you move off-campus and no longer need to connect your computer to the College's Network, you'll probably want to remove the Clean Access Agent. To do so, go to Start -> Control Panel -> Add or Remove Programs. Select Clean Access Agent and click Remove.

Last Modified: August 12, 2008