Gradual Migration from NAC Agent to ISE Posture Module?

[Leroy Plock]

Greetings,

I'm trying to migrate from Mobility Client 3.1.13015/NAC Agent 4.9.4.3 to Mobility Client 4.4.01054 with the ISE Posture Module. We will do a pre-deploy using Microsoft Systems Center. We can't deploy from ISE because the users don't have admin rights.

We don't want to unleash this on all users at once, but I can't figure out how to do a gradual rollout. It seems like a given ISE deployment can only handle one or the other for a given operating system. I hoped we could have matched a different client provisioning policy based on which agent (Nac agent or ise posture module) was being used. But I don't see anything in the conditions I can use.

Ideas?

Thank you.

[Brian Taylor]

Just add condition to CPP for an AD security group and move upgraded users into it. You could also add a NAC service audit to check for acise running.