topic ISE nac agent provisioning question in Network Access Control

ISE nac agent provisioning question

Jeppe Flensted — Mon, 11 Mar 2019 02:23:11 GMT

I have downloaded the nac agents and compliancy modules to the ISE, and configured the client provisioning rules. The user guide doesn't really explain the next steps very good.

I guess because User Identity Groups are used in the policy, the provisioning is used with webauth, is that correct?

ISE nac agent provisioning question

Tarik Admani — Sat, 04 Aug 2012 18:48:45 GMT

Jeppe,

The client provisioning is done with any authentication method. Either via dot1x or webauth, it is the authorization policy that starts this process. You redirect your clients the client provisioning portal using the authorization policy. Then you determine which agent (web agent, nac agent, or no agent) via the client provisioning policy.

Hope that helps,

Tarik Admani
*Please rate helpful posts*

ISE nac agent provisioning question

Jeppe Flensted — Sat, 04 Aug 2012 20:46:13 GMT

thanks alot. So I could do an authz policy saying redirect to webauth, and when the user login they will be asked to download the nac agent?

Re: ISE nac agent provisioning question

Tarik Admani — Sat, 04 Aug 2012 21:06:04 GMT

That is correct, but make sure you set the right portal. You want to set it to the client provisioning portal seen in this screenshot attached

Tarik Admani
*Please rate helpful posts*

ISE nac agent provisioning question

Jeppe Flensted — Sat, 04 Aug 2012 21:33:29 GMT

Thanks!