topic Re: How to push Cisco Anyconnect Posture module in Network Security

How to push Cisco Anyconnect Posture module

Abheesh Kumar — Fri, 21 Feb 2020 16:38:44 GMT

Hi Folks,

Can somebody guide me how to push Cisco anyconnect posture module via ASA when a user connects anyconnect vpn. I am planing to do VPN posturing with ISE 2.2

Re: How to push Cisco Anyconnect Posture module

Sheraz.Salim — Wed, 09 Jan 2019 16:24:53 GMT

Check this link

https://community.cisco.com/t5/security-documents/how-to-configure-posture-with-anyconnect-compliance-module-and/ta-p/3647768

Re: How to push Cisco Anyconnect Posture module

Mohammed al Baqari — Wed, 09 Jan 2019 16:33:43 GMT

>From ASA CLI, you can select which modules to run under webvpn configuration

Step 1

In ASDM go to Configuration > Remote Access VPN > Network (Client)
Access > Group
Policies.
Step 2

Select a group policy and click Edit or Add a new group policy.
Step 3

In the navigation pane, select VPN Policy > AnyConnect Client. At Client
Modules to Download, clickAdd and choose each module you want to add to
this group policy. The modules that are available are the ones you added or
uploaded to the ASA.
Step 4

Click Apply and save your changes to the group policy.

Re: How to push Cisco Anyconnect Posture module

Marvin Rhoads — Thu, 10 Jan 2019 02:28:27 GMT

You may want to consider pushing your module and associated settings from ISE vs. from ASA. That makes keeping things in sync easier.

Re: How to push Cisco Anyconnect Posture module

Abheesh Kumar — Thu, 10 Jan 2019 07:23:08 GMT

Hi Marvin,
I am looking for automated process of posture module installation. From ISE we can achieve this by redirecting user to a client provision page and from there user need to click for installation.
In my case customer need without any user intervention we need to deploy posture module for VPN users.
Anyway thanks for your info.

-Abheesh

Re: How to push Cisco Anyconnect Posture module

Abheesh Kumar — Thu, 10 Jan 2019 07:23:26 GMT

Thanks bro, It works.

-Abheesh