topic Controlling NAC Agent behaviour in Network Access Control

Controlling NAC Agent behaviour

tonyp8581 — Mon, 11 Mar 2019 03:59:14 GMT

Hi,

I'm trying to find some documentation that explains what makes the NAC agent pop up and start the Posture assessment.

I always was under the impression that the Authorization policies created in ISE is responsible to wake the NAC Agent and begin the Posture assessment. However, I recently noticed without having any policies in place, the NAC agent still pop's up and starts the Posture assessment.

Does anybody have any information on this behaviour ?

Thanks !

Controlling NAC Agent behaviour

Muhammad Munir — Fri, 11 Oct 2013 06:00:09 GMT

I have found a document for controlling NAC Agent Behaviour,Please visit the given link:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cas/49cas-book.html

Controlling NAC Agent behaviour

tonyp8581 — Fri, 11 Oct 2013 12:58:34 GMT

Hi Muhammad,

Thanks for the link. The section where it talks about the SWISS protocol seems interesting. The only thing I'm wondering if this configuration also applies to an ISE environment. You see, I have a wireless client going through an WLC 5508 with ISE being used as radius server.

Do you think the NAC Agent should begin the posture assessment without any configured posture policy ?

Tony