Anyconnect Posture Customization

[fatalXerror]

Hi guys,

I am able to have posture in ISE using Anyconnect Posture module however, my client ask if we can customize the Anyconnect module like adding a link or button in it?

thanks

[Rahul Govindan]

You cannot add links on the module itself as far as I am aware, but you can change your text within the moedule . But since you are asking for Posture, you can push a link as a message when posture check fails -allowing a user to click on the link and re-mediate while they are in quarantine state. An example is given here:

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise-posture-00.html

What are you looking to change/add on the client?

[fatalXerror]

Hi Rahul,

thanks for the feedback. i actually did that link remediation however, let us say i am currently in compliant status then if a user uninstall an application which is part of the posture condition, is that endpoint would go non compliant right away?

i am using 2.1 btw.

can we shorten the reassessment like every 5 mins?

thanks

[Rahul Govindan]

Yes, you can use Periodic Re-Assessment on ISE to re-assess a compliant user periodically. You have to create a PRA config under " Administration > System > Settings > Posture > Reassessments" to do this.

More info on this here:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010110.html#task_32E33C6631054F32983F532D4A2383CE