topic Re: Cisco ISE is agent less or Agent base. in Network Access Control

Cisco ISE is agent less or Agent base.

omprakashbalda1 — Tue, 08 Aug 2017 07:28:00 GMT

Dear All,

Request you to please suggest if Cisco ISE is agent less or Agent Base.

Please share the links if any are available

Re: Cisco ISE is agent less or Agent base.

Nidhi — Tue, 08 Aug 2017 08:21:40 GMT

Hi Omprakash,

Cisco ISE provides secure access mgmt and is a single policy control point for wired/wireless, VPN . It provides contextual identity and relevant policies can be granted for what can be accessed and what cannot be.

ISE can be deployed in a physical appliance as well as a VM instance.

For more detailed information about the product and various other features please refer the link - Cisco Identity Services Engine (ISE) - Cisco

Nidhi

Re: Cisco ISE is agent less or Agent base.

japo — Tue, 08 Aug 2017 15:48:19 GMT

ISE can work without an agent but you will probably get more functionality when using with an agent (e.g. Anyconnect).

It depends on what is important to your deployment. For example, I recommend that you consider using the agent if Posture assessment is important to you. ISE 2.1 How to Configure Posture with NAC Agent and AnyConnect Posture Module - YouTube

Re: Cisco ISE is agent less or Agent base.

Jason Kunst — Tue, 08 Aug 2017 17:50:15 GMT

It all depends on what you're looking to do if you're looking to do simple profiling of what type of device then you don't need an agent

For more detailed information and compliance checks Please look into ise 2.3 which just introduced a new temporal agent for windows and Mac

For full compliance checks use AnyConnect