topic Anyconnect VPN -> ASA -> ISE -> Ping Identity MFA with ISE Posture checks in Network Access Control

Anyconnect VPN -> ASA -> ISE -> Ping Identity MFA with ISE Posture checks

ktracy — Tue, 07 Aug 2018 20:11:55 GMT

Has anyone seen any documentation or know of successes with this integration?

Re: Anyconnect VPN -> ASA -> ISE -> Ping Identity MFA with ISE Posture checks

Francesco Molino — Wed, 08 Aug 2018 04:06:57 GMT

Hi

Never did the complete package with posture but all the rest will work well. You're MFA as to be declared into external radius token server.
With posture it should the same without issues.
The only concern would be the re-authentification process and/posture reassessment where you should get a new passcode pop up.

Unfortunately no doc for this whole package I'm aware of. You can found docs for mfa but including posture, not sure. Symantec VIP, Duo have socs showing ISE integration.

Re: Anyconnect VPN -> ASA -> ISE -> Ping Identity MFA with ISE Posture checks

thomas — Thu, 09 Aug 2018 00:34:48 GMT

Please do search the Community site...

AnyConnect Secure Mobility Client

ISE Community Resources > Compliance & Posture

ISE Design & Integration Guides ( http://cs.co/ise-guides )

Searching for 2fa you'll find Two Factor Authentication on ISE – 2FA on ISE which is the same concept regardless of vendor.