topic Re: ISE Posture - ASA minimum version in Network Access Control

ISE Posture - ASA minimum version

manvik — Thu, 06 Aug 2020 12:04:01 GMT

Hi Guys,

Doing ISE posture for Remote VPN users connecting via ASA.

Is there any minimum version of ASA to be used for ISE posture to work?

Re: ISE Posture - ASA minimum version

Mohammed al Baqari — Thu, 06 Aug 2020 12:42:05 GMT

Hi, Cisco ASA Version 9.2.1 because you need CoA support.

**** please remember to rate useful posts

Re: ISE Posture - ASA minimum version

manvik — Fri, 07 Aug 2020 04:20:26 GMT

I have applied Apex license to ISE. Purchased Anyconnect Apex license too. Many forums say, Anyconnect Apex shouldn't be applied anywhere.

Should we apply anyconnect Apex license tto ASA.

Re: ISE Posture - ASA minimum version

Marvin Rhoads — Fri, 07 Aug 2020 15:41:42 GMT

You are only REQUIRED to install the AnyConnect Apex license on the ASA if the remote access VPN is using any Apex-related features. If your Apex feature use is limited to ISE Posture then the ASA will work fine with just Plus licenses (even though you are required to have the Apex licenses in the sense of the overall deployment).

That said, if you have them go ahead and install the activation key(s). It's one less thing to worry about later during some 3 a.m. troubleshooting call when something isn't working and whoever is looking at the problem wonders why the discrepancy.

Re: ISE Posture - ASA minimum version

thomas — Mon, 10 Aug 2020 20:48:24 GMT

Minimum ASA version is stated in the ISE Compatibility Guides.

Re: ISE Posture - ASA minimum version

manvik — Tue, 11 Aug 2020 05:10:08 GMT

Thank you Thomas,

That link is really helpful. Can i directly upgrade ASA from 9.12 to 9.8

This guide says yes, but it's a bit confusing..

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html#ID-2152-0000000a