cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
700
Views
0
Helpful
3
Replies

ISE 1.2 nac agent provision

Mason Tu
Beginner
Beginner

Hi,

Is there any way to do a nac agent auto provision?

I know it can be achieve by cwa portal(web redirect) and user have to install nac agent manually. But we would like to see nac agent be installed right afeter user successfully login using 802.1x.

3 Replies 3

Saurav Lodh
Rising star
Rising star

As per my knowledge , it is not possible. If NAC is not available, it has to be downloaded from source, which is reflected from Redirect URL.

jgonzales2
Beginner
Beginner

I dont follow your thought process but this is how i have most of my deployments are setup. 

CWA < NSP < COA < 802.1x < Posture Status Unknown *In this state either client does or doesnt have nac agent in which ISE will proceed to install it or continue probing to for the NAC agent. 

 

Remove CWA < NSP < COA from the picture and you have your exact scenario. What is your work flow look like that it is not "automatic" and define what you mean by "manually"?

manjeets
Participant
Participant

Could you try endpoint debugging, a new feature in ISE 1.3, and see if that gives a better DEBUG log(s)? You may access it at ISE live log by right-clicking on the endpoint’s MAC address or go to Operations > Troubleshoot > Diagnostic Tools > General Tools > EndPoint Debug.

 

Also, at exact what point did it give this failure? Right after CWA login and transit to the CPP?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: