Cisco ISE 3.0 as a NAC/agentless configuration

network_geek1979 · ‎05-10-2021

Team,

We have been looking at the Cisco ISE as a NAC solution and so far have tested use cases using 802.1x authentication. The authentication being certificate based.

While this works great my intention is to avoid touching the NIC adapter setting on every laptop.

e.g. in this case we had to go ahead and enable security, certificate selection etc on each NIC which is a challenging thing to do. While we can still push these setting over active directory or Jamf(for MAC books) I still prefer something that does not touch end user laptops.

Any suggestion/links I can get for this approach? Is this even possible in ISE?

Thanks a ton for anything and everything that I can get.

Regards,

N!!!

marce1000 · ‎05-11-2021

- FYI : https://community.cisco.com/t5/security-documents/how-to-agentless-posture-configuration-validation-amp/ta-p/4152763

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

network_geek1979 · ‎05-11-2021

Hello,
Thanks for this link, it will help a ton.

Is this going to need the Premium license levels? From what it looks like, yes.

Regards,

N!!