topic Thank you! in Network Access Control https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710338#M55173 <P>Thank you!</P> Thu, 18 Jun 2015 19:31:29 GMT trevorjenix 2015-06-18T19:31:29Z TCP UDP 8905 8909 with AnyConnect Posture Agent https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710336#M55168 <P>Documentation and books refer to allowing TCP/UDP ports 8905 and 8909 to the ISE servers in the AGENT-REDIRECT ACLs to make sure NAC agent can be prvisioned, be controlled by ISE and allow keepalive traffic. My question is if this all applies only to the NAC agent or if it applies to the AnyConnect Posture module as well, I couldn't have seemed to find this information anywhere. Are&nbsp;8905 and 8909 ports still used in with:</P><P>- AnyConnect provisioning ?</P><P>- NSP provisioning ?</P><P>- AnyConnect posture module communication and keep alives ?</P><P>If not using NAC agent, would it be enough to only include port 8443 to ISE PSN(s) IPs?</P> Mon, 11 Mar 2019 05:48:35 GMT https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710336#M55168 trevorjenix 2019-03-11T05:48:35Z you will be still needing https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710337#M55171 <P>you will be still needing 8905 8909 with anyconnect</P> Thu, 18 Jun 2015 10:14:45 GMT https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710337#M55171 Venkatesh Attuluri 2015-06-18T10:14:45Z Thank you! https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710338#M55173 <P>Thank you!</P> Thu, 18 Jun 2015 19:31:29 GMT https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/2710338#M55173 trevorjenix 2015-06-18T19:31:29Z Re: you will be still needing https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/3729274#M55179 <P>Some documents show 8909 isn’t used in ise 2.0+</P> Sun, 21 Oct 2018 10:13:41 GMT https://community.cisco.com/t5/network-access-control/tcp-udp-8905-8909-with-anyconnect-posture-agent/m-p/3729274#M55179 Brian Taylor 2018-10-21T10:13:41Z