The Department of University of Housing and Information Technology Services have implemented a system to minimize the spread of computer viruses and worms on the university network. It is called Cisco Clean Access. It involves downloading and installing a client program on your computer to verify your computer has an active anti-virus program installed, and your Windows Operating System is up to date. After installing the client program, it will scan your computer. If you have a current anti-virus program and you have all the latest Microsoft Windows Updates installed, your computer will be allowed access to the internet.

While you are connected to the Resnet internet system, you will want to take measures to protect your computer, your data, and yourself from viruses, hackers, and spy-ware. While there is no a certain way to avoid all of these threats while online, the University Housing’s Resnet Internet Service recommends the following:

v Keep your computer up-to-date with the latest security patches Microsoft and Apple provide; you can find updates for their operating systems fairly often. These updates are important in making sure your computer is safe from network attacks and similar problems. Windows users are encouraged to configure their computers to update automatically. If you are running any Microsoft operating system, you can find more information about automatic updates and protecting your computer at http://www.microsoft.com/protect.

v Always use an anti-virus program. An anti-virus program is designed to protect your computer from possible virus infections. A computer without anti-virus software will become infected on a high speed network. Good anti-virus program can be downloaded from www.Mcafee.com, www.Symantec.com, http://free.grisoft.com etc. Do not bring your computer to TWU with plans to attach to the network with no anti-virus program previously installed. Never install more that one anti-virus program on your computer at one time. Doing so may cause your computer to stop functioning properly.

Many new viruses take advantage of defects in the Windows operating system. Viruses and worms such as “Blaster” and its variants will infect a computer running Windows 2000 and XP as soon as it is connected to a high speed network if the proper Windows updates and patches are not installed.

Due to the fact that new Windows security issues are discovered very frequently, we are encouraging students to run Windows Update at least once a week.

v Windows users should use anti-spyware software. Ad Aware Personal, Spybot Search & Destroy, and Microsoft Anti-Spyware (beta) are all free, effective anti-spyware tools.

v Run a personal firewall on your computer.

v Be extremely careful with file sharing software. Peer-to-peer file-sharing software like KaZaa, Lime Wire, and Morpheus are definitely forbidden on the Resnet system. If theses programs, other file sharing programs, or high traffic use caused by viruses are detected on your Resnet data port, you will be disconnected from the Resnet system.

v Turn off your machine when you aren’t using it. There are number of good reasons to turn off your machine when you aren’t using it. It will help save power for other uses, and will help keep your machine safe from hackers’ intent on breaking in to your machine, and/or spreading viruses to other machines.

Texas Woman's University and the Department of University Housing do not guarantee that your computer will work on the Resnet system. If needed, the Resnet staff will assist in configuring your system and installing your network interface card. Call the Department of University Housing for an appointment.

Recommended Computer Hardware and Software

Recommended minimum computer configurations are:

* An Intel-compatible microcomputer (IBM PC or compatible) with at least:
* 233MHz Pentium-class processor
* 128 MB RAM
* 40 GB Hard Drive with at least 200MB available
* 15"; SVGA monitor4 (10.4" active matrix for laptops)
* 4X CD-ROM drive
* Windows 2000 or later

*Must have a valid copy of the operating system, if your computer/laptop does not have a valid copy installed you will not get internet access.

You must supply:

* 10/100BaseT Ethernet adapter
* A 10/100BaseT Ethernet patch cable, 25' recommended

NOTE: Windows 95, 98a and Windows 3.1x are not supported on Resnet.

* An Apple Macintosh computer with at least:
* PC 300 MHZ w/PCI minimum (Power PC G4 400 MHZ w/PCI preferred
* 128 MB RAM
* 40 GB Hard Drive with at least 100MB available
* Mac OS9 preferred

You must supply:

* 10BaseT Ethernet adapter or transceiver (most are built-in on newer Macs)
* A 10/100 Base Ethernet patch cable, 25' recommended

NOTE: MacOS 7.x and earlier versions are not supported on Resnet.

Section 2: Getting Started

Getting connected is simple and easy. All you need is a computer, network card, and data network patch cable.

Computer

Desktop laptop

There is not a specific brand of computer/laptop that you need to use on this campus. Basically, any desktop/laptop should be able to connect to the internet as long as you have a network card installed and an Ethernet cable. Most computer/laptop come with the network card already installed. In case your computer/laptop does not come with a network card, you can purchase one. The type of network adapter appropriate for your computer depends on the model of your computer.

It is recommend for you to keep all disks that came with your computer, just in case you need to install any driver, do a recovery, or reinstall your operating system.

Network Card. A network card (also called network adapter, network interface card, NIC) is a piece of computer hardware designed to provide for computer communication over a computer network.

Examples of network cards:

Network card for Desktops

PCMCIA Network Cards for Laptops

Network cable. You will also need an Ethernet cable known as a CAT-5. The CAT5 network cable standard supports Fast Ethernet and other forms of local area networking. An Ethernet cable is require for your computer. This will be connected from your computer network card and to a Ethernet port on your wall

Do not plug a phone cable into your Ethernet port. It will not connect you to the network.

If you don’t have this cable you can get one free from the Guinn or Stark front desk.

What you NOT need to connect to the Internet

You do not need:

Internet Service Provider

Network Router, Switch, or Hub

Internet Service Provider

TWU provides Internet service to Housing Residents.

Each room should have at least one Internet connection jack per resident.

Section 3: Connecting

Connection

-Where to plug the Ethernet cable?

Desktop

Look at the back of your PC

mp3,usb,mic Ethernet cable to ethernet card

Laptop

Look at the sides or the back of your laptop

-Where to plug the other end of the Ethernet cable?

There is one Ethernet port per resident in each room. The ports may be located on the wall, or in places next to the room desks.

There are two different ports, the red one is where you need to plug the other end of your Ethernet cable, and the other one is where you plug your phone cable.

*picture

Section 4: Network configuration

Windows XP and Windows 2000

Configure Internet Explorer

Go to Start menu, select Open Control Panel, if the link on the left corner says, “Switch to Classic View,” click on it.
Next double click on Internet Options
Then click on the Connections tab at the top of the Internet Properties window

Make sure that “never dial a connection” is checked
Click on LAN Settings
and check Automatically detect settings
Click on apply then click OK

Configure TCP/IP

Click Start, Click Control Panel, click Network Connections.
For Local Area Connection (LAN)- if the icon representing your network connection is disabled or has a red “X” displayed then it is not properly configured. If is disabled right click and under the options click enable. If you get the red “X” again, either your cable is not plugged in properly or you have a defective cable. If you cable is not working properly, try another cable.
Right click Local Area Connection (LAN), and then click Properties
On the General tab, click Internet Protocol (TCP/IP), and then click Properties

5. You will get another window called Internet Protocol (TCP/IP) Properties, make sure that TCP/IP settings are set to “Obtain an IP address automatically and Obtain DNS server address automatically”.

6. Click OK on both windows.

Macintosh OS

1. In System Preferences, click on the Network icon
Mac OS X network icon

2. In the Network window, select Built-in-Ethernet from the Show menu

Mac OS X network configuration

3. Select the TCP/IP tab

4. Select Using DHCP from Configure menu

5. Apply your changes

Section 5: Downloading Cisco Clean Access

Before you can access the internet in your room, you have to download Cisco Clean Access. Clean Access will not remove anything from your computer, is just going to check your computer to see if you have the latest windows updates, and anti-virus program.

Cisco Clean Access

Step 1: Open Internet Explorer

Step 2: Access any site other than www.twu.edu

Step 3: A network security alert will appear click “OK”

Step 4: Another security alert will appear click “Yes”

Step 5: You should be redirected to the TWU login page

(If you get a page that says “Page cannot be found”, it is most likely that spyware on your computer is redirecting network traffic. The solution is to download “Mozilla Firefox”. Firefox is a free alternate web browser. Enter the address www.firefox.com and download the free browser. Important: Do NOT make Firefox the default browser. Then use Firefox instead of the Internet Explorer for the rest of the installation. Repeat the steps above using Firefox instead of Explorer.

Step 6: Login using your Portal username and password.

Step 7: A Network Security Notice will appear click “Download Clean Access Agent”.

Step 8: A file download box will appear for the Clean Access Agent, click “run” or “Save to disk”. Save on the Desktop.

Step 9: Double Click on the saved file to install the agent.

Step 10: Follow the installations instructions.

(After double clicking on CCA_Setup, click next, then Install, and Finish.

Step 11: The Cisco Clean Access Login page should appear.

If you have an Internet Security Firewall like McAfee, Norton, or ZoneAlarm, you must open the firewall software and configure the firewall software to “Always allow Cisco Clean Access”, instead of blocking Cisco Clean Access. CCA will be blocked by default. (or you may get a Security Alert asking if you want to grant access to Cisco Clean Access click Permit, Allow, or Grant Access depending on the Internet Security Firewall).

Step 12: Enter your Portal username and password to login to CCA.

Step 13: A Security Alert message may appear click “Yes”.

A new version of Clean Access Agent may be available, click yes to install (repeat step 10). After this, you may have to restart your computer. After the restart log in to Cisco Clean Access, the login window should pop-up by itself. If not right click on the CCA icon at the right bottom of your screen and click login.

Step 14: Cisco Clean Access will check to see if you meet the requirements. If you do not

You may be asked to install Windows updates. If so click on “Go to Link” to Install updates. Continue installing Windows Updates, this make take several times before all needed updates are installed. If you do not have an anti-virus program installed in your computer you will be redirected to a webpage that will allow you to choose from several to download. After installing the anti-virus program it is recommended that you update and run (scan) the anti-virus program every week.

Step 15: Otherwise you will get a message saying that you are successfully connected to

the Internet. Click “OK” then wait a few seconds before opening your web browser.

NOTE: If you had any problems downloading Cisco Clean Access please see the next section for more details

Section 6: Detail steps to download Cisco Clean Access

Downloading Cisco Clean Access

Step 1

Go to start click on Internet explorer, (or from you desktop click on Internet Explorer). Click on Click HERE

Step 2 Step 3

If you get a Security Alert message Log in using your Portal Username

like this, click Yes (don’t need to type @twu.edu) and

Password

Step 4 Step 5

Click on Download Clean Access Save it to your computer. Close the

Agent. Internet Explorer window and double-

Click on CCAAgent_Setup.exe, click

Run and start installing.

Step 6 Step 7

Click Next Click Finish

Step 8

NOTE: If you have McAfee, Norton, or ZoneAlarm installed in your computer you may get a Security Alert message like the one underneath

McAfee Norton Internet Security Alert

For MacAfee a window will pop-up and Select "Permit" from the drop down list

ask you if you would like to allow the to unblock Clean Access Agent to

application to access the internet. Make continue streaming.

sure to select "Grant Access".

ZoneAlarm Security Alert

Click "Allow" to unblock Clean Access Agent to continue streaming.

After that you will get a window like the one below.

Step 9

If there is a new version of Clean Access Agent click yes to install (repeat steps 6-7), you may have to restart your computer. After the restart log in to Cisco Clean Access, the login window should pop-up by itself. If not, right click on the CCA icon at the right bottom of your screen and click on log in.

Step 10 Step 11

After logging in, you will get a Security Click continue.

Alert message, click yes.

Step 12 Step 13

You need to download windows updates, Click Yes

Click on Go to link

Step 14 Step 15

Click on Install Now Click on Express

Step 16 Step 17

Wait, Microsoft window is checking for Click on download and Install Now.

the latest updates for your computer.

Step 18 Step 19

After the updates are installed, restart your Log in to the CCA window again.

computer.

Step 20 Step 21

Click continue Click on Go to Link

Step 22 Step 23

You need to download updates until This will validate your windows, if you

there’s no more updates to download. have a valid copy of windows you will

Click on Express. be able to download this, otherwise you

will fail to download.

Step 24 Step 25

Click on Go to Link to download an You can select from one of these

Antivirus program. anti-virus programs to download.

After installing the anti-virus program

you must log in to CCA again. Then

you should get Internet access.

Unable to log in?

If you are having trouble logging into Clean Access, or the login/logout line is grayed out when you click on clean access, it may be blocked by your firewall.

Open the anti-virus firewall software by clicking it on the taskbar to configure the settings, more details in the next section.

Section 7: Configure Internet Security Firewall

McAfee Firewall Configuration

Step 1

Open McAfee Security Center by double clicking on the icon in the taskbar

Step 2 Step 3

Click Personal Firewall Plus on the left. Click View the Internet Application

List.

Step 4 Step 5

Scroll down in the list of programs until you Close McAfee Security Center.

find the name of the Clean Access Agent

application you wish to unblock. The name

of this application should be Clean Access

Agent. Once you have located the appropriate

name, right click on the name of the application

and select Allow Full Access.

Norton Firewall Configuration

Step 1

Right Click and Open Norton

Step 2 Step 3

Click on Personal Firewall, then Click on Programs Tab.

Configure.

Step 4 Step 5

Scroll the list programs until you find Close Norton Internet Security

Clean Access and Select Permit All.

Click OK

Section 8: Securing your computer

-Windows Firewall

Windows Firewall does offer some protection from network attacks from malicious software known as worms. However, Windows Firewall does not protect you from viruses or spy-ware. To turn on Windows Firewall click Start>Control Panel>Windows Firewall then click On (Recommended) then click ok. For more information go to

http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx

-Viruses

Computer viruses are software programs deliberately designed to interfere with computer operation, record, corrupt, or delete data, or spread themselves to other computers and throughout the Internet. Viruses often slow things down and cause other problems in the process.

Make sure to have updated anti-virus software installed in your computer. Most computers will come with McAfee or Norton already installed, in most cases this is just a trial. Later on you will have to pay for the subscription.

If you don not have an anti-virus or your subscription is expire, you can download AVG from http://free.grisoft.com.

-Spyware

Spyware is a general term used for software that performs certain behaviors such as advertising, collecting personal information, or changing the configuration of your computer, generally without appropriately obtaining your consent. Spyware is often associated with software that displays advertisements (called adware) or software that tracks personal or sensitive information.

If you do not have an anti-spyware installed in your computer you can get a program called “Ad-Aware” to remove spyware is free from the web site www.lavasoftusa.com. Another very highly rated anti-spyware program is “Spybot” from www.safer-networking.org

-File Sharing

It is prohibited to use any file sharing software in school, if a program of this kind is detected on your Resnet data port, you will be disconnected from the Resnet system.

-Configure Windows for Automatic Updates

The most reliable way to get updates from Microsoft is to have the updates delivered automatically to your computer using Automatic Updates. You can turn on turn on Automatic updates if you go to Start>Control Panel>Security Center>Automatic Updates

Then click on Automatic (recommended) and select the time when you want them to be downloaded Click Ok. Your Automatic Updates is turn on now. When automatic updates are ready to install, you will see a yellow shield

If you have any problems you can visit the following website for more help http://www.microsoft.com/athome/security/update/msupdate_keep_current.mspx

Section 9: Troubleshooting

Do I need to login to Clean Access every time I want access the Internet?

You do not need to login every time, but have to login to the Clean Access window at least every week.

Does the school provide free Microsoft software?

The school does not provide any kind of Microsoft software, if you need any Microsoft software you have to buy your own. You can purchase Microsoft software from the link on your portal. https://portal.twu.edu/its/ptc_purchasing.htm

Can I use wireless?

Wireless internet is not available in the halls, but you can use wireless in the Library and the student union. Just make sure you configure your wireless connection.

Case 1: I went home for the weekend and I took my laptop with me, and when I came back and plugged my cable in the data jack, my internet is not working anymore.

Answer: At your home you may be using dial-up or DSL, so your LAN settings may have been changed. It could be that your connection is set to Dial-up, or your LAN connection may be disable, please see Section 4: Network Configuration

Case 2: I’m getting a connection but the Cisco Clean Access window is not popping up.

Answer: If you have installed McAfee or Norton, your firewall maybe blocking Cisco Clean Access so I recommend you to check your firewall settings. Please see Section 7: Configure Internet Security Firewall.

Case 3: I keep getting “SSL server certificate revocation failed 12057” message when I try to log in.

Answer: Open internet explorer, click on “Tools”, click on “Internet Options”, click on “Advanced”, scroll down to the Security section and uncheck the box for “Check for server certificate revocation”. Close explorer and log back into Clean Access.

Case 4: I keep getting an “API error when I try to log into clean access.

Copy fixapi.bat to your computer and run it by double clicking on it.

Case 5: My machine is connected to the internet but keeps trying to acquire an ip address but cannot.

Copy fixreg.reg, winsockxpfix.exe and WindowsXP-KB884020-x86-enu.exe to your computer and run them by double clicking on them.