Cisco Client Access Agent being blocked

[Russ Cooper]

I don't understand why this program is still being blocked, its been around
for quite a while and, after all, a security program from a legitimate vendor
(who is a solid MS partner, right?)

File Name: CCAAgentLauncher.exe
Display Name: CCAAgentLauncher
Description: Not Available
Publisher: Cisco Systems, Inc.
Digitally Signed By: NOT SIGNED
File Type: Application
File Path: C:\Program Files\Cisco Systems\Clean Access
Agent\CCAAgentLauncher.exe
File Size: 28672
File Version: 4.01.0003
Date Installed: 12/7/2007 4:12:50 PM
Startup Type: All Users Startup Folder
Location: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Clean
Access Agent.lnk
Classification: Not yet classified
Ships with Operating System: No
SpyNet Voting: In Progress

 

[Bill Sanderson]

Am I correct that you've changed your settings from the defaults? I'd have
thought that "not yet classified" programs are passed with the default
settings, and only notified to the user if they have asked to be notified
about "software that has not yet been classified for risks," in tools,
options.

Additionally, this version of CCA is not only not current, but is the
subject of a Cisco Security Advisory, which is not real new either--January
of 2007. It does appear that it is possible for your software (or perhaps
the hardware it connects to) to be patched for this vulnerability without
changing the version number.

http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml

Nobody here can answer the question about why this particular software
version is still not classified, but one possibility might be that it is an
older version. I'd expect newer versions to be signed, and perhaps "known"
to Microsoft as well.