End users can bypass the mandatory installation of the Cisco Clean Access Agent by changing the User-Agent string of their browser. This allows them to connect to the network without the host-based checks being run. If configured, remote checks are still run. Versions affected: This works in at least 3.5.3.1 and 3.5.4.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39529/perfigo.txt
Source: https://packetstormsecurity.com/files/39529/perfigo.txt.html