topic Re: ISE Posture in Network Access Control

ISE Posture

behrouz6408021 — Thu, 21 May 2020 18:44:11 GMT

I would like to deploy ISE Posture with Cisco Any connect for our Company with 2000 Users

How Can i Install and deploy ISE Posture Profile to all Users in our Company . What is Solution for this situation ?

Re: ISE Posture

Mike.Cifelli — Thu, 21 May 2020 19:11:10 GMT

Here are some things to consider based on the limited information provided:
SCCM is a good tool to utilize for deployment of the AnyConnect client + additional modules on the Windows side of the house. Think about if you want to add certain required components into your images for future deployments. There are several items that are required to be deployed to your clients besides just the ISE Posture Profile in order for the whole solution to work. Work on identifying which posture checks you plan to utilize and determine how you plan to push authz policy for clients in each session state (unknown, comlpiant, non-compliant).
I strongly suggest taking a peek at this: https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273#toc-hId--1775761939
Also see here for tutorials: http://labminutes.com/video/sec
HTH!

Re: ISE Posture

behrouz6408021 — Thu, 21 May 2020 19:51:36 GMT

Thank you Mike

How can i distribute Posture profile to our company users ?

When i installed Any connect module . How to put profile into any connect ?

Re: ISE Posture With Anyconnect

balaji.bandi — Thu, 21 May 2020 20:06:43 GMT

here is the good document for reference:

https://community.cisco.com/t5/security-documents/ise-posture/ta-p/3657443

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

Re: ISE Posture

balaji.bandi — Thu, 21 May 2020 20:08:02 GMT

i have suggested some document other post you have posted.

https://community.cisco.com/t5/nso-developer-hub-discussions/ise-posture-with-anyconnect/m-p/4090205/highlight/false#M5264

Re: ISE Posture

Mike.Cifelli — Fri, 22 May 2020 12:41:31 GMT

Take a look into the links provided by all on this post. You have several options. Here are a few that you could rely on:
The ISE AnyConnect Configuration that gets assigned to your Client Provisioning Portal or SCCM. HTH!