topic Re: Posture Implementation in Network Access Control

Posture Implementation

Turki.A.Baqatada — Fri, 26 Jan 2024 20:13:31 GMT

We are going to implement posture and mainly any connect required for posture as you know, so if the client doesn't have any connect is there any way that client when connect to the posture SSID ISE provide any connect to client for completing the posture steps

Re: Posture Implementation

Rob Ingram — Fri, 26 Jan 2024 20:17:38 GMT

@Turki.A.Baqatada you can use the ISE Client Provisioning Portal. The user will connect and be redirected to the portal and download the anyconnect client.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_configure_client_provisioning.pdf

https://community.cisco.com/t5/security-knowledge-base/client-provisioning-with-cisco-ise-without-posture-validation/ta-p/3929277

Re: Posture Implementation

ahollifield — Mon, 29 Jan 2024 12:58:11 GMT

You can use Temporal Agent or Agentless if you don't want/can't use AnyConnect: https://community.cisco.com/t5/security-knowledge-base/ise-posture-prescriptive-deployment-guide/ta-p/3680273

If you do choose to use AnyConnect note that you must also have Secure Client Premier licenses.