Posturing with Cisco CVO

bgajadar — Fri, 09 Nov 2018 14:59:41 GMT

Hello All

Does anyone know if Cisco CVO (88x model ISR) has limitation with posturing or do we have any documentation that I can use for reference?

Re: Posturing with Cisco CVO

Surendra — Fri, 09 Nov 2018 15:45:04 GMT

As long as the CVO router which I believe are ISR G2 routers supports redirection/dACLs etc, I don’t see why it should not support posture. So the real question is, do they support redirection/dACLs/CoA and redirect ACLs? I’ve skimmed through Cisco feature navigator for 891 ISR G2 Image 15.7(3)M train and I do not see the features required for Posture. So I do not believe you can do so but again, I’m not an expert on ISR routers. If you have any local setup, probably try setup it up and see if the attributes being sent from the ISE server are being applied on the interface to which the client connects to.

On the other hand, you could try posture without redirection which removes the dependency over the network device that the endpoint is connected to except for CoA (one of the features that I did not find this IOS supporting on these routers but not 100% sure). Check it out here : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210523-ISE-posture-style-comparison-for-pre-and.html

Re: Posturing with Cisco CVO

kthiruve — Mon, 12 Nov 2018 05:25:54 GMT

Here is the compatibility matrix that will give you an idea what is been validated across Cisco platform as well as third party.

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

-Krishnan

topic Posturing with Cisco CVO in Network Access Control

Posturing with Cisco CVO

Re: Posturing with Cisco CVO

Re: Posturing with Cisco CVO