Clean Access FAQ

Question: What does Clean Access do?

Answer:
Clean Access is a solution provided by Cisco, Inc. that performs network validation. The software performs the following functions:

     • Network user authentication
     • Checks for an authorized antivirus program
     • Check for up-to-date antivirus definition files
     • Checks for critical Microsoft security updates (Windows only)
     • Quarantines the system until it meets these checks
     • Provides access to the remediation sites.

Furthermore, it should be noted what Clean Access does NOT do.

Clean Access does NOT...

     • Access files on your computer.
     • Track where you surf or who you email.
     • Give anyone the ability to watch the activities on your computer.

Question: Why has YHC implemented Clean Access?

Answer:
Due to enormous virus traffic originating from student computers in the past, our Internet Service Provider was detecting several "Denial of Service" attacks coming from our campus. Rather than have our internet feed revoked we chose to shut down network access in the dorms until we could manually track down the offending computers. This took some time and it happened in the weeks before final exams so it was a huge inconvenience to our students.

It was our policy at the time (and remains so) that all students have some sort of antivirus software on their computers but we had no way of enforcing it. So the decision was made to implement a network access system that would enforce this policy and prevent major network interruptions from occurring in the future.

Question: How does the validation process work?

Answer:
Windows Users: Upon your first time connecting to the YHC network, any attempt to access the Internet via a browser will result in being redirected to a YHC web page that prompts you for your YHC login information. Once logged in you will be presented with a page that will allow you to download the "Cisco Clean Access Agent." Once you have installed this agent, you will be once again prompted for your login information and at this time Clean Access will check to make sure you have:

     • A YHC approved antivirus program installed
     • Up-to-date antivirus definitions
     • Current Microsoft updates

Once you pass these checks you will be granted full network access.

Mac and Linux Users: When trying to access the internet when connected to the YHC network, you will be redirected to a page that requires your YHC login information.  Once logged in, your Internet browser will redirect to your home page and you will have full network access.


Question: What if I fail one or more of these checks?

Answer:
The Clean Access Agent will provide you with information on how to remedy any failed checks.

Question: I did what the Clean Access Agent said to do but I still can't log onto the network. What do I do?

Answer:
Visit our Clean Access remediation page found here (only available from a campus connection).  If you still have problems after that, please bring your computer to ITECH for service.

Question: Why do you only support Sophos Antivirus and Etrust Antivirus?

Answer:
We only support these two antivirus programs for several reasons:

     • Antivirus programs come out with version updates so frequently that we are unable to update all
       of them in the Clean Access system in a timely manner.
     • We are very familiar with the antivirus programs mentioned above and know they work well
       with our network.
     • If a problem related to an antivirus program arises, we will be able to fix it much faster because
       we are so familiar with it. 

Question: I've never heard of Sophos or Etrust.  Are they any good?

Answer:
We recommend using Sophos over Etrust because Sophos also removes/blocks spyware.  We are phasing out our support of Etrust in Fall 2008.  Most users are familiar with personal antivirus products such as Norton and McAfee, which are primarily intended for home use.  It is not surprising that you may not have heard of Sophos and Etrust antivirus as they are primarily used by businesses and institutes of higher learning.  For more information on Sophos' awards and certifications, click here

 
Question: How do I hookup my Playstation, Xbox, etc. to the Internet if it is blocked by Clean Access?

Answer:
You will need to submit the MAC address of your gaming console.  To find the MAC address of your gaming console, refer to this guide.  To register a MAC address for a gaming console visit our Clean Access Gaming Console Registration page.