topic Do we need Posturing for Implementing Dot1x and MAB? in Network Access Control

Do we need Posturing for Implementing Dot1x and MAB?

techmgr.aballesteros — Tue, 27 Aug 2019 02:17:11 GMT

Hi gents (and gals) in our community,

Do we need Posturing for Implementing Dot1x and MAB, or is it a requirement for implementing wired ise? I'm initially planning to follow the recommended phase from Monitoring, Low-Impact, to Closed mode. Currently my ISE 2.4 don't have the License for Posture.

Thanks in advance!

Re: Do we need Posturing for Implementing Dot1x and MAB?

Arne Bier — Tue, 27 Aug 2019 02:59:06 GMT

Hi @techmgr.aballesteros

Posturing is not required for 802.1X or MAB. It's an additional service that ISE can provide if you want to check the security posture of the endpoint that is trying to gain network access.

All you need is Base licensing for 802.1X and MAB - AS LONG AS you don't build any Authorization Policies that include advanced features like Profiling and Posturing, etc. Simple stuff like AD look ups only need Base.

cheers

Re: Do we need Posturing for Implementing Dot1x and MAB?

techmgr.aballesteros — Tue, 27 Aug 2019 21:31:58 GMT

@Arne Bier Thanks for verifying! That'll help me move forward and finish my planning checklist.