ACS5 and MS NAP

[Paul Masterton]

All,

Can I just check my thinking?

In the old ACS 4 world you could use HCAP to offload posture checking to Microsoft NAP as in:

http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns466/ns812/guide_c07-491729.html

I don't see anything for this in ACS 5, in fact the migration notes suggest "Posture Checking" is "N/A":

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/migration/guide/Appendix_B_Config_Mapping.html

But that's all I can find to suggest its gone (other than not seeing it in the ACS configuration).

Can anyone confirm? Is this to push us towards ISE? Are there other options?

Cheers for the help!

[Tarik Admani]

Paul,

Your thinking is correct. this was a feature that was only supported in ACS 4 and from my memory (my days in TAC) customers had to work with their local SE to get the key which activates this feature.

www.cisco.com/en/US/docs/security/nac-nap/1.0/release/notes/NACNAPRN.html#wp1161060

Thanks,

Tarik Admani
*Please rate helpful posts*

[Paul Masterton]

Thanks for that, good to know I was roughly right!

Is it going to be possible to acheive similar with the ACS 5 RADIUS proxy feature?

Thanks again.