Information Technology Services

Clean Access Requirements

To help protect our users and our campus network from unwanted viruses and other dangerous computer and network attacks, SUNYIT has implemented a network security system called “Cisco Clean Access”

Cisco Clean Access is a network connection and compliance management solution that ensures that computers connecting to the SUNYIT network are protected against malicious threats such as viruses, worms, Trojans as well as known software vulnerabilities that have been exploited. All systems using SUNYIT’s Residence Hall Networks or Wireless Networks must authenticate through this system.

Additionally, Windows computers must install and run the Cisco Clean Access Agent program to access the Internet. The agent scans your system for vulnerabilities and certifies it as safe to access the campus network. If it is found to be lacking one or more safeguards, the computer's ability to access to network access will be restricted to websites that will allow you to fix the problems.

OS Requirements:

• Windows 2000, Windows XP , Windows Vista
• Macintosh: 10.4.9 or higher


Requirements enforced by a Clean Access Agent include:

• Antivirus Software – installed and current (Approved Anti Virus Software)
• Antispyware software – installed and current (Approved Anti Spyware Software)
• Windows updates – all critical patches must be installed
• Windows update function must be enabled


Antivirus software
Symantec, McAfee, and Trend Micro are some of the Antivirus programs approved for use. For a complete list please visit http://cleanaccess.sunyit.edu. One of these approved applications must be installed, running and up-to-date. Meaning, if your renewal subscription has expired or if your definitions are out of date, you will be denied network access until this issue is corrected. If you are currently a registered SUNYIT student, Symantec Antivirus is provided at no charge. You may download this application before you arrive at http://symantec.sunyit.edu/ .

Antispyware software
In addition to Antivirus software, we require the use of an AntiSpyware utility.
There are three free applications that handle the removal of such software, these include: Ad-Aware by Lavasoft ( http://lavasoft.com ), SpyBot Search and Destroy ( http://www.safer-networking.org/en/index.html ), and Microsoft Defender ( http://www.microsoft.com/athome/security/spyware/ ).

All Microsoft Critical Updates for your OS
SUNYIT requires your machine to be current with all related critical updates for your Microsoft OS. Meaning, if you have, for example, Windows XP, you must have Service Pack 2 installed and all critical updates released post SP2. For whichever updates your Microsoft OS requires, detailed instructions are provided to correct the issue.

Automatic Updates Enabled
Automatic Updates must be enabled to ensure your machine receives, all critical updates in a timely manner. If you fail this requirement, step-by-step instructions are provided via the Clean Access Agent.

For now, Macintosh OS and Linux computers will only need to log in (authenticate) to gain network access.

These settings and requirements are in place for your protection and the protection of the campus. It is your responsibility to ensure you meet these requirements before you arrive. SUNYIT will only provide assistance to users already meeting these requirements. If you don't know the state of your machine, or feel uncomfortable making these changes, we suggest that you take your personal computer to a computer service professional before arriving on campus for the fall semester. Our Clean Access system prevents your computer from connecting to the Internet unless you meet these requirements. Residence Hall and Wireless connections will be validated against these requirements weekly.