topic ISE 1.2 Standalone Mode in Network Access Control

ISE 1.2 Standalone Mode

fatalXerror — Mon, 11 Mar 2019 05:25:38 GMT

Hi Experts,

Good day!

I just want to clarify if I can provide posture assessment in ISE 1.2 even if it is in standalone mode because some said I can but based on my understandings of ISE since 1.1.4, I need to convert it first to an IPN mode for it to provide posture assessment.

Please help, I'm a little bit confused.

thanks,

niks

IPN is only used if you don't

jan.nielsen — Mon, 09 Feb 2015 18:39:38 GMT

IPN is only used if you don't have a switch or a wireless controller, that supports CoA and webauth redirect function, as required by ISE to do posture assesment. But to answer your question, IPN is a specific software bundle that you "upgrade" and ise node to, which maskes it an inline node, and can't be used without having another ISE node running the PAN/MNT roles.

Sorry but I'm a bit confused

fatalXerror — Tue, 10 Feb 2015 01:19:29 GMT

Sorry but I'm a bit confused about your explanation, so you mean that a standalone ISE can't provide posture assessment unless I upgrade it with the required software?

No, ISE can do posture just

jan.nielsen — Tue, 10 Feb 2015 01:32:35 GMT

No, ISE can do posture just fine, in "standalone" mode, it just requires you to use newer cisco networking equipment, ISE deployed as an IPN is used mainly for posture and guest redirect when you are not using Cisco networking equipment, or old equipment that doesn't support Coa and/or webauth redirect..

ISE standalone node can

Venkatesh Attuluri — Wed, 18 Feb 2015 14:52:32 GMT

ISE standalone node can provide posture service, you need to make sure you have advanced license on ISE. IPN is for NAD that do not support COA.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0100.html