topic Re: ISE WIRELESS POSTURE in Network Access Control

ISE WIRELESS POSTURE

Ughur — Mon, 17 Jul 2023 14:24:07 GMT

Hi everybody.

I have configured posture for wireless authentication. But when i connect to wireless network reditecting not work. Can you help me?

Re: ISE WIRELESS POSTURE

Mark Elsen — Mon, 17 Jul 2023 17:05:07 GMT

- What is the wireless architecture : elaborate on controller model(s) , AP model(s) , software versions , ...

Re: ISE WIRELESS POSTURE

Dustin Anderson — Mon, 17 Jul 2023 17:48:58 GMT

As Marce said, you didn't give much info, so I will make some assumptions and give you some to look at.

Assumptions: ISE, AirOS WLC, Lab.

When you are doing a posture assessment, the device should be basically quarantined during the time. This is usually done with a wireless ACL that ISE will call. These are spots you could need to check.

1) Syntax of the ACL. ISE will call the exact name you enter in the WLC, capitol letter or lower case does matter. ACL and Acl are different.

2) on the WLC SSID, under advanced make sure the NAC is set to ISE NAC, otherwise the WLC will ignore what comes back from ISE.

3) Make sure you have AnyConnect set up for whatever you want to check and the config is set in ISE. AC will only return a pass/fail, you will not see in ISE if anything is wrong.

4) Make sure the wireless ACL allows the client to do DHCP and DNS. And if there is a firewall that they can talk to the ISE server.

Anything else and you'll need to be more specific of what the issue is and what config you have.

Re: ISE WIRELESS POSTURE

Ughur — Fri, 21 Jul 2023 12:01:25 GMT

Thanks for replying.
I can configure this step. Now, when i tr connect to wireless, cisco ise redirecting portal. But i can not download anyconnect, getting error. Then i installed anyconnect packages manually on windows.

Now, Cisco Anyconnect system scan status is "Compliant" even if user must be "not complain". I'm adding new requirements but status not change to "non-compliant.

Re: ISE WIRELESS POSTURE

Ughur — Fri, 21 Jul 2023 12:05:19 GMT

Re: ISE WIRELESS POSTURE

thomas — Fri, 21 Jul 2023 18:50:30 GMT

Please see .

You have not even included a error, a configuration, or anything for us to comment on or suggest in your initial post.

Please review our existing https://cs.co/ise-resources or https://cs.co/ise-guides for potential guides including https://cs.co/ise-posture for Posture Configuration.

Re: ISE WIRELESS POSTURE

Dustin Anderson — Fri, 21 Jul 2023 19:47:23 GMT

When you set up, you will usually set a time to recheck posture. So, if you want to recheck before that time is up I usually have to delete the endpoint from ISE.