Install the Cisco Trust Agent

Add Computer Associates Attributes to the NAC Database

Before you can define policies for Computer Associates posture attributes, you must first add the attribute/value pairs to the Cisco Secure ACS NAC database.

Note: The following procedure assumes Cisco Secure ACS 3.3 is installed at:

C:\Program Files\CiscoSecure ACS v3.3

To add Computer Associates attributes to the Cisco Secure ACS NAC database, follow these steps:

1.Go to the Computer Associates SupportConnect website, http://supportconnect.ca.com, and locate the eTrust Agent for Cisco NAC.

2.Download the eTrust Agent for Cisco NAC to a system typically used for network management tasks.

3.Extract the contents of the downloaded zip file to a temporary directory, such as C:\Temp.

4.On the Cisco Secure ACS 3.3 for Windows system, copy the file cai-pp.txt to: C:\Program Files\CiscoSecure ACS v3.3\Utils

The cai-pp.txt file contains the attribute/value pairs for NAC-enabled Computer Associates applications.

5.From the C:\Program Files\CiscoSecure ACS v3.3\Utils directory, run the following command:

CSUtil.exe -addavp cai-pp.txt

The CSUtil.exe program adds the attribute/value pairs to the Cisco Secure

ACS NAC database.

Use the Cisco Secure ACS user interface to configure policies for Computer

Associates products. For instructions, refer to the Cisco document NAC User

Guide for Cisco Secure ACS 3.3.

Install the Cisco Trust Agent on all end-point devices, such as desktop computers, workstations, laptops, and servers that connect to or use network resources. Download and install the Cisco Trust Agent 1.0 from the Cisco website, http://www.cisco.com.

10 Installation Guide