topic Re: ISE Client Provisioning Portal in Network Access Control

ISE Client Provisioning Portal

mrshahid — Fri, 21 Feb 2020 18:33:35 GMT

Is it possible to START the Device Security Check process automatically once user is successfully authenticated on Cisco ISE.

Re: ISE Client Provisioning Portal

sjones@scottcompanies.com — Tue, 05 Dec 2017 00:39:22 GMT

I'd like to know this as well. I don't want internal users to see this page... They shouldn't in general b/c we're pushing out all of the needed files. I just want the posture module to start the scan. Did you ever get this sorted out?

Re: ISE Client Provisioning Portal

mrshahid — Tue, 20 Mar 2018 14:18:19 GMT

Still looking for solution. 😞

Re: ISE Client Provisioning Portal

Octavian Szolga — Wed, 21 Mar 2018 06:29:36 GMT

Hi,

Can you be more explicit? My understanding is that you have AC installed (NAM + Posture) and the posture module doesn't kick in when you login on your windows machine?

Have you tried configuring your posture xml file with a call home server? (that would be any dns resource for which you want to force the redirection to happen)

(maybe this can help https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210523-ISE-posture-style-comparison-for-pre-and.html)

Thanks,

Octavian

Re: ISE Client Provisioning Portal

mrshahid — Wed, 21 Mar 2018 07:51:17 GMT

Yes we have AC with Posture Module.
1. User enters login credentials - VPN status is 'connected'
2. Posture module starts checking for compliance - Status shows 'compliant'
3. Automatically a new browser window or tab is opened (ISE redirection) asking for device security check.
4. End user at this stage can access internet only. Unless they clicks on 'start' button on this new Client provisioning portal, they cannot access any intranet resources.
5. I am looking for a way to automate 'Client provisioning portal' check. End user need not click on start button to be able to access internal resources.

Re: ISE Client Provisioning Portal

Octavian Szolga — Wed, 21 Mar 2018 11:31:26 GMT

Hi,

Have you read the link I posted? ISE can do posture checks without redirection..

Thanks,

Octavian

Re: ISE Client Provisioning Portal

mrshahid — Wed, 21 Mar 2018 14:37:15 GMT

I missed it. Will read that post and reply later. Thanks for quick reply.