topic Cisco ISE Profiling with Cisco AnyConnect VPN clients in Network Access Control

Cisco ISE Profiling with Cisco AnyConnect VPN clients

IamSamSaul — Mon, 06 Dec 2021 21:05:24 GMT

Hello,

I am running Cisco ISE 3.1 with Cisco FTD and Cisco AnyConnect VPN clients for remote users. I would like to configure device profiling with the above setup. Which profiling probes I can use the best to achieve profiling based on devices using Cisco AnyConnect VPN clients?

I hope someone can help me in the right direction.

Thanks & Regards,

Sam

Re: Cisco ISE Profiling with Cisco AnyConnect VPN clients

balaji.bandi — Mon, 06 Dec 2021 21:14:22 GMT

Look at the guide :

https://community.cisco.com/t5/security-documents/ise-profiling-design-guide/ta-p/3739456

most cases you can use posture :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215236-ise-posture-over-anyconnect-remote-acces.html

Re: Cisco ISE Profiling with Cisco AnyConnect VPN clients

IamSamSaul — Mon, 06 Dec 2021 21:35:58 GMT

Hi Balaji,

Thanks for link.

As stated below, do I have to install Cisco AnyConnect VPN's Posture Module
to achieve the profiling for remote users connected with Cisco AnyConnect
VPN clients.

"AnyConnect Identity Extensions (ACIDex) is a feature of the Cisco
AnyConnect Secure Mobility Client which helps to solve this issue. ACIDex,
also referred to as Mobile Posture, allows the AnyConnect VPN client to
communicate endpoint attributes to the Cisco Adaptive Security Appliance
(ASA) over a remote access VPN connection."

Thanks.

Re: Cisco ISE Profiling with Cisco AnyConnect VPN clients

balaji.bandi — Mon, 06 Dec 2021 21:42:45 GMT

yes here is the guide :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect42/administration/guide/b_AnyConnect_Administrator_Guide_4-2/configure-posture.html