Anyconnect and temproal agent

[Qingguo Zhang]

Is it possible to setup up posture for both anyconnect and temporal agent ?  Not sure CPP can be applicable both.

[Jason Kunst]

Please explain in more detail your use case

[Qingguo Zhang]

Use case is that for the users with anyconnect installed will do posture directly, for users w/o anyconnect will do temporal agent.

Understand Different client provisioning policy can have different conditions,  for existing anyconnect posture user do they still use client provisioning policy to update profile ?

We can’t differentiate user other than the condition of anyconnect installed.

[Surendra · Accepted solution]

Not both at the same time on the same machine but you can configure CPP for AnyConnect and Temporal agent separately. Especially, with 2.4 you can choose which policies apply to which Agent in the posture policies.

[Qingguo Zhang]

can I use the first policy for user who have already installed anyconnect and posture module ,  2nd policy for user w/o anyconnect will go to temporal agent ?

[Timothy Abbott · Accepted solution]

You will need another condition to differentiate the two as both could be applicable.  You can only use one or the other but not both at the same time.  For example, you could use temporal for Windows 7 and AnyConnect for Windows 10.  You could also use AD groups to differentiate as well.

Regards,

-Tim

[hslai]

Surendra and Tim are correct. ISE Client Provisioning Policy is using first match.