Cisco AnyConnect 4.9 NAM AND ISE Posture only

[ahmed_saleh]

HI 

i am going to deploy NAM and ISE Posture for dot1x and compliance only 

is core and vpn module  required and why

[Mohammed al Baqari · Accepted solution]

Hi,

Yes, you need to install core for posture to work (not for NAM). The reason
is related to the way Cisco packaged the binaries which is internal to
developers.

Here is the reference.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html

***** please remember to rate useful posts

[Marvin Rhoads]

In additon to what @Mohammed al Baqari correctly noted, you can prevent the AnyConnect VPN tile from appearing by using a VPNDisable_ServiceProfile.xml as follows:

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html#ID-1425-00000309

Here is the profile for reference:

<?xml version="1.0" encoding="utf-8"?>
<!--
    Cisco AnyConnect VPN Profile -

    This profile is a sample intended to allow for the disabling of VPN service
    for those installations that do not require VPN support.
-->
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
  <ClientInitialization>
    <ServiceDisable>true</ServiceDisable>
  </ClientInitialization>
</AnyConnectProfile>