Anyconnect VPN -> ASA -> ISE -> Ping Identity MFA with ISE Posture checks

[ktracy]

Has anyone seen any documentation or know of successes with this integration?

[Francesco Molino]

Hi

Never did the complete package with posture but all the rest will work well. You're MFA as to be declared into external radius token server.
With posture it should the same without issues.
The only concern would be the re-authentification process and/posture reassessment where you should get a new passcode pop up.

Unfortunately no doc for this whole package I'm aware of. You can found docs for mfa but including posture, not sure. Symantec VIP, Duo have socs showing ISE integration.

[thomas · Accepted solution]

Please do search the Community site...

AnyConnect Secure Mobility Client

ISE Community Resources > Compliance & Posture

ISE Design & Integration Guides ( http://cs.co/ise-guides )

• Cisco AnyConnect
• Cisco Adaptive Security Appliance (ASA)
• Only has Ping Federate, not Ping MFA

Searching for 2fa you'll find Two Factor Authentication on ISE – 2FA on ISE which is the same concept regardless of vendor.