topic ISE nac Agent automatic upgrade possible ? in Network Access Control

ISE nac Agent automatic upgrade possible ?

vrz rrr — Mon, 11 Mar 2019 02:54:15 GMT

Hello all,

I have this :

802.1x windows with NacAgent version (let's say 1) <----> 802.1x Enabled Switch (aaa radius OK) <------> ISE and AD on the same LAN

ISE is configured for client provisionning with material (NacAgent version 2) downloaded from Cisco website (as depicted in the documentation)

I've a basic authentication and authorization scheme that let me in properly but I expect the NACAgent to be upgraded.

No profiling is configured for the time being.

Is anybody can help ?

Best regards ?

ISE nac Agent automatic upgrade possible ?

vrz rrr — Wed, 19 Dec 2012 10:30:14 GMT

Cisco website says :

"When users first log into a network that is managed by Cisco ISE and requires access via an agent, they are prompted to install temporal or persistent agents"

But how can I get to a network "managed" via an Agent ?

ISE nac Agent automatic upgrade possible ?

Tarik Admani — Wed, 19 Dec 2012 17:26:01 GMT

Hi,

In the ISE client provisioning settings, you an enable the option where the NAC agent upgrade is mandatory. However it is up to you to run perioidic updates and to map the latest agent in the client provisioning settings.

Thanks,

Tarik Admani
*Please rate helpful posts*

ISE nac Agent automatic upgrade possible ?

vrz rrr — Thu, 20 Dec 2012 08:17:45 GMT

Hi Tarik,

Your are right regarding that option "upgrade is mandatory"

However, my case was that you do need to enter the ISE's FQDN on the NAC Client and make sure that DNS operates properly.

Once authenticated, the NAC agent shows an upgrade message.

It works.

Thank you all.