cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

132
Views
5
Helpful
2
Replies
Highlighted
Cisco Employee

ISE Posture for Dual-Homed endpoints detection

Hi,

 

Is it possible to configure any posture policy to detect and prevent connection of endpoints Dual-Homed.

We would like to have a solution with a temporal agent for posture to prevent Dual-Homed stations connected to network.

Any suggestion ?

 

Thank in advance

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE Posture for Dual-Homed endpoints detection

Posture doesn’t have this capability natively. Theoretically if Microsoft exposed something in the registry you could perhaps write a check to see if more than one are running (might be a script needed to run on the endpoint that is called)

Anyconnect NAM will do this


"The AnyConnect Network Access Manager provides superior connectivity features. Administrators can control which networks or resources that endpoints can connect to."

http://www.cisco.com/c/dam/en/us/products/collateral/security/anyconnect-secure-mobility-client/at_a_glance_c45-578609.pdf 

2 REPLIES 2
Cisco Employee

Re: ISE Posture for Dual-Homed endpoints detection

Posture doesn’t have this capability natively. Theoretically if Microsoft exposed something in the registry you could perhaps write a check to see if more than one are running (might be a script needed to run on the endpoint that is called)

Anyconnect NAM will do this


"The AnyConnect Network Access Manager provides superior connectivity features. Administrators can control which networks or resources that endpoints can connect to."

http://www.cisco.com/c/dam/en/us/products/collateral/security/anyconnect-secure-mobility-client/at_a_glance_c45-578609.pdf 

Cisco Employee

Re: ISE Posture for Dual-Homed endpoints detection

Thx Jason.