ISE posture for static IP using auth VLAN

[wileong]

Hi,

Due to compliance/posture check using third party switch, Auth VLAN has been deployed and some of the endpoint is using static IP. What is the best way to predeploy AnyConnect profile for known discovery host - PSN automatically, considering Auth VLAN will require user to "change" IP upon moving from auth to production VLAN.

Thanks

Wing Churn

[hslai · Accepted solution]

Please review info at Pre-Deploying AnyConnect in AnyConnect Admin Guide. Specific to ISE Posture is to include an ISE Posture profile with the DiscoveryHost and other fields configured accordingly.