topic ISE posture for Palo ALto Globalprotect user in Network Access Control

ISE posture for Palo ALto Globalprotect user

manvik — Sat, 27 Feb 2021 10:43:51 GMT

Have anyone got Globalprotect agent working with Cisco ISE posture module. ie when Remote VPN user connects via Globalprotect ISE posture module kicks and send posture info to Cisco ISE.

Re: ISE posture for Palo ALto Globalprotect user

Marcelo Morais — Sat, 27 Feb 2021 12:45:44 GMT

Hi @manvik

please take a look at:

Event Viewer > Application and Services Logs > Cisco AnyConnect ISE Posture Module

to check what triggers the ISE Posture Module:

Hope this helps !!!

Re: ISE posture for Palo ALto Globalprotect user

Mike.Cifelli — Sat, 27 Feb 2021 19:21:49 GMT

I am not sure I fully understand your question. Are you wanting ISE posture assessment to detect/check if globalprotect is in use AKA service is running or something along those lines? If you are hoping that the ISE posture module can integrate with another VPN client that will not work AFAIK. I would suggest taking a look at the following for further guidance on Agent Considerations & how posture assessment works: https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

HTH!

Re: ISE posture for Palo ALto Globalprotect user

manvik — Tue, 02 Mar 2021 13:35:02 GMT

Thank you folks for the wonderful replies.

>>ISE posture assessment to detect/check if globalprotect is in use AKA service is running

I was checking whether ISE do can posture for a remote user who connects to corporate network via Globalprotect VPN.

Re: ISE posture for Palo ALto Globalprotect user

Mike.Cifelli — Tue, 02 Mar 2021 14:34:20 GMT

AFAIK this is not supported. See the 'Compliance & Posture' section here for more details: Cisco ISE & NAC Resources - Cisco Community

HTH!

Re: ISE posture for Palo ALto Globalprotect user

thomas — Sun, 14 Mar 2021 04:30:34 GMT

ISE Posture Module only works on AnyConnect.

Your only other option would be to try ISE 3.0's new Agentless Posture capability.

See How To: Agentless Posture Configuration, validation & Troubleshooting

What's New in ISE 3.0 Webinar [YouTube]

17:02 Agentless Posture on Windows & macOS

21:20 Demo: Agentless Posture on Windows & macOS