Cisco NAC Appliance (Clean Access) expiry

[remani]

Team,

what would be the impact of Cisco NAC Appliance (clean Access) license expiry on the end points .  Is it possible to run ISE2.1 with NAC agent 4.9.5.8 . What would be the impact of NAC agent license expiry on the end points deployed .

[Jason Kunst · Accepted solution]

AFAIK the NAC agents aren’t licensed so there would be no implications

If running nac appliance as it’s well end of support and life then recommend deploying ISE 2.2 with latest patch in environment and deploying anyconnect ASAP

Nac agent is end of support as well

[remani]

what would be the impact of NAC appliance license expiry for production end points .

[Jason Kunst]

I checked with the product managers on this and we don't have data on an expiring license or behavior. Please start moving the customer off NAC appliance and onto ISE asap as the product is end of life support and if indeed expired then right to use is now gone.

[Jason Kunst]

Some further clarification. NAC Appliance licenses were not term. NAC Agent licenses were not separately licensed and do not have notion of agent Apex like AC for Posture.

NAC Agent can be used with ISE up to ISE 2.2: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/compatibility/ise_sdt.html#pgfId-123696

Also note posture would require an Apex license on ISE.