NAC, CSA, CTA, TrendMicro OfficeScan QUESTION?

[rvaguilera]

We currently run CSA v4.0.3 build 717 w/ Hotfix as well as TrendMicro OfficeScan 6.5.

Apparently both these version support/include the Cisco Trust Agent (CTA) for NAC. Will having both products on an endpoint cause conflicts? Is there a specific configuration that needs to be implemented for these applications to coexist?

[pcomeaux]

Hey there -

I currently have a similar setup working with CSA 4.0.2.629 and 4.0.3.720 with OS 6.5. I used Trend to deploy CTA with the certificate of the ACS 3.3 server at this customer's site.

Trend should deploy CTA 1.0.53 and CSA should not bundle CTA until 4.5. I currently have build 4.0.3.720 on my machine, but CTA is not currently installed (haven't installed it yet on a replacement laptop.

In the CSA MC, I had to apply the Module for CTA to the Groups I had deployed within CSA. I do not think the CTA Module in CSA MC is applied to any groups by default. By not associating the CTA module with any group, CSA will not permit CTA to accept the request from the NAC Router for the posture assessment to begin.

There is tuning that is required within CSA MC to let the Trend Services receive updates and scan files. This is always required for CSA and not unique to NAC.

Let us know if you have other questions or run into a direct conflict with any components.

thanks

peter

[tsteger1]

We are running McAfee VSE 8 and CSA and would also like to know how this will work, not just for NAC. I'm curious as to which one intercepts first and does it pass it on to the second one. I know McAfee says it will not install buffer overflow on a host with CSA installed but it still installs the TDI driver.

[lmilher_2]

My friend, may be is late, but Officescan 6.5 and 7.0 can work without problem with CSA. In NAc implementation, CSA check about Windows patchs in the clients, and add info to the antivirus policy.

Can you reach me at: leonardom@edoctor.antivirus.com.ar

Bye.