Cisco ISE posture check

[Blur_nom]

Hi guys,

Just wondering if it is possible to perform posture check with Window native 802.1x service enabled ?

Is there a reason why Cisco Anyconnect NAM is preferred in this situation. What about MacOS ?

[Octavian Szolga]

Hi,

You can do it either way. NAM would be preferred because you still put time and effort to install posture, why wouldn't you install a product that provides both services? It's the same effort.

Another reason is that using NAM you can do EAP-Chaining (doesn't mean its that popular though).

One downsize of using NAM (for instance) is that you should use GPO to hide microsoft's network manager icon considering that it confuses people regarding their network access. (NAM would be in charge of that)

Thanks,

Octavian

[Blur_nom]

Hi Octavian Szolga ,

Thanks for your reply. The reason why i would like to make use of the native supplicant as it doesn't require installation and that my company has 2 different operating system. Mac OS and window.

Since mac doesnt support anyconnect nam. It seems like a good choice to standardize them to use native supplicant for both cases.