Cisco ISE Web Deploy Anyconnect Without NAM

[Freemen]

I am migrating ISE 1.4 to 2.6, current ISE is using NAM agent, however we wanted to remove the NAM replace with native supplicant, what I thinking is when the pc join the SSID with new ISE, will be auto update any connect 4.3 to 4.7, but in the same time we want the NAM to be uninstall automatically.

anyone have idea how to do this?

[howon]

Have not tried it, but for wireless, you can try using client provisioning policy to download new AnyConnect package. We typically use this for deploying AnyConnect with posture module, but you could try using this to remove AC NAM by not selecting it from the new 4.7 install package.

[Freemen]

Try in my lab, although unchecked it, still will update anyconnect NAM.

[hslai · Accepted solution]

Yes, it will update AnyConnect. No, it would not un-install NAM. You will need manually perform NAM un-install or use another means.