Cisco ISE Profiling with Cisco AnyConnect VPN clients

[IamSamSaul]

Hello, 

I am running Cisco ISE 3.1 with Cisco FTD and Cisco AnyConnect VPN clients for remote users. I would like to configure device profiling with the above setup. Which profiling probes I can use the best to achieve profiling based on devices using Cisco AnyConnect VPN clients?

I hope someone can help me in the right direction. 

Thanks & Regards, 

Sam

[balaji.bandi]

Look at the guide :

https://community.cisco.com/t5/security-documents/ise-profiling-design-guide/ta-p/3739456

most cases you can use posture :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215236-ise-posture-over-anyconnect-remote-acces.html

[IamSamSaul]

Hi Balaji,

Thanks for link.

As stated below, do I have to install Cisco AnyConnect VPN's Posture Module
to achieve the profiling for remote users connected with Cisco AnyConnect
VPN clients.

"AnyConnect Identity Extensions (ACIDex) is a feature of the Cisco
AnyConnect Secure Mobility Client which helps to solve this issue. ACIDex,
also referred to as Mobile Posture, allows the AnyConnect VPN client to
communicate endpoint attributes to the Cisco Adaptive Security Appliance
(ASA) over a remote access VPN connection."

Thanks.

[balaji.bandi · Accepted solution]

yes here is the guide :

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect42/administration/guide/b_AnyConnect_Administrator_Guide_4-2/configure-posture.html