cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

376
Views
10
Helpful
2
Replies
Highlighted
Beginner

Cisco AnyConnect 4.9 NAM AND ISE Posture only

HI 

i am going to deploy NAM and ISE Posture for dot1x and compliance only 

is core and vpn module  required and why

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

Hi,

Yes, you need to install core for posture to work (not for NAM). The reason
is related to the way Cisco packaged the binaries which is internal to
developers.

Here is the reference.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html

***** please remember to rate useful posts

View solution in original post

2 REPLIES 2
Highlighted
VIP Advisor

Hi,

Yes, you need to install core for posture to work (not for NAM). The reason
is related to the way Cisco packaged the binaries which is internal to
developers.

Here is the reference.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html

***** please remember to rate useful posts

View solution in original post

Highlighted
Hall of Fame Guru

In additon to what @Mohammed al Baqari correctly noted, you can prevent the AnyConnect VPN tile from appearing by using a VPNDisable_ServiceProfile.xml as follows:

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html#ID-1425-00000309

Here is the profile for reference:

<?xml version="1.0" encoding="utf-8"?>
<!--
    Cisco AnyConnect VPN Profile -

    This profile is a sample intended to allow for the disabling of VPN service
    for those installations that do not require VPN support.
-->
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
  <ClientInitialization>
    <ServiceDisable>true</ServiceDisable>
  </ClientInitialization>
</AnyConnectProfile>

 

Content for Community-Ad