Do we need Posturing for Implementing Dot1x and MAB?

[techmgr.aballesteros]

Hi gents (and gals) in our community,

Do we need Posturing for Implementing Dot1x and MAB, or is it a requirement for implementing wired ise? I'm initially planning to follow the recommended phase from Monitoring, Low-Impact, to Closed mode. Currently my ISE 2.4 don't have the License for Posture.

Thanks in advance!

[Arne Bier · Accepted solution]

Hi @techmgr.aballesteros 

Posturing is not required for 802.1X or MAB.  It's an additional service that ISE can provide if you want to check the security posture of the endpoint that is trying to gain network access.  

All you need is Base licensing for 802.1X and MAB - AS LONG AS you don't build any Authorization Policies that include advanced features like Profiling and Posturing, etc.  Simple stuff like AD look ups only need Base.

cheers

[techmgr.aballesteros]

@Arne Bier Thanks for verifying! That'll help me move forward and finish my planning checklist.