topic Cisco ISE temporal Agent in Network Access Control

Cisco ISE temporal Agent

saxenanitesh8522 — Tue, 19 Feb 2019 16:35:32 GMT

Hi,

We are trying to do Cisco ISE TEmporal Agent, the agent is getting installed but it's keep's failing saying not able to find the policy server.

But the same configuration is working with Web agent where the agent is able to find and do the posture check.

I have configured posture policy for anyconnect and attached the same but it doesnt work while it works with web agent.

Thanks,

Re: Cisco ISE temporal Agent

pan — Tue, 19 Feb 2019 16:52:19 GMT

Have you created redirect ACL on ASA? Does the redirect ACL have deny statement for PSN, DNS?

On ISE authorziation profile only the name of the ACL will be given and actual ACL will be present on ASA.

Re: Cisco ISE temporal Agent

saxenanitesh8522 — Tue, 19 Feb 2019 16:56:39 GMT

Hi,

my redirect page is coming and downloading the temporal agent.

This is in the wireless

1. allowed all udp traffic

2. allow traffic from ISE nodes (4) policies in out

3. Deny all the traffic.

the same ACL is working for the webagent but not for temporal agent.

yes i do have firewall in between but there is nothing getting blocked between Subnet and ISE and vice-versa.

Re: Cisco ISE temporal Agent

pan — Tue, 19 Feb 2019 17:00:34 GMT

Is your vpn and wireless user hitting same authz policy?

Did you create ACL on ASA? Could you share ACL content here.

Re: Cisco ISE temporal Agent

saxenanitesh8522 — Tue, 19 Feb 2019 17:07:54 GMT

Temporal Agent --> is just for wireless and no VPN Users are using the same.

Re: Cisco ISE temporal Agent

saxenanitesh8522 — Wed, 20 Feb 2019 16:15:38 GMT

Dear All,

I have tested the following scenario on the wireless:-

1. Windows 7 with Anyconnect and temporal Agent --> working properly
2. Windows 10 with web agent --> working properly
3. Windows 10 with temporal agent --> not working.

With windows 10 it keep's saying failed to find the policy server where as web agent is working properly.

I have tried with multiple version of Temporal Agent for Windows 10 it keep giving the same issue.