Cisco AnyConnect Posture Module

[Nick Mavrou]

Hi all,

I have a case that we must migrate clients using anyconnect posture module for WiFi and Wired access to a new Cisco ISE 3.1. The old ISE belongs to the previous manage services provider.

The current situation is that anyconnect points to the old ISE for posturing and would like to get it point to the new ISE smoothly, without uninstalling and installing the software again.

Is it any way to succeed that by changing a few parts only on the current anyconnect config, perhaps modifying ISEPostureCFG.xml?? Is it any workaround official documented.

** On the new Cisco ISE we have done all the necessary configuration, such conditions posture policies, adding the resources ( anyconnect app, posture module, profile etc.

Many thanks in advance

[hslai]

@Nick Mavrou If the deployment configured to use URL redirects to discover the ISE policy server, then it should work without your updating anything on the client side. You might consider blocking the communication from the clients to the old ISE servers.

If not using URL redirects, yes, you may manually update the ISE posture profile on the client.

• Ref1: ISE Posture Deployment Best Practices and Considerations 
• Ref2: Compare Earlier ISE Versions to ISE Posture Flow in ISE 2.2