Cisco ISE 3.0 as a NAC/agentless configuration

[network_geek1979]

Team,

We have been looking at the Cisco ISE as a NAC solution and so far have tested use cases using 802.1x authentication. The authentication being certificate based.

While this works great my intention is to avoid touching the NIC adapter setting on every laptop.

e.g. in this case we had to go ahead and enable security, certificate selection etc on each NIC which is a challenging thing to do. While we can still push these setting over active directory or Jamf(for MAC books) I still prefer something that does not touch end user laptops.

Any suggestion/links I can get for this approach? Is this even possible in ISE?

Thanks a ton for anything and everything that I can get.

Regards,

N!!!

[marce1000]

 - FYI : https://community.cisco.com/t5/security-documents/how-to-agentless-posture-configuration-validation-amp/ta-p/4152763

 M.

[network_geek1979]

Hello,
Thanks for this link, it will help a ton.

Is this going to need the Premium license levels? From what it looks like, yes.

Regards,

N!!