ISE 1.2 Posture Assessment with AnyConnect Client

[vinodjad1234]

Hi Experts,

I need clarity for posture assessment with AnyConnect client. I understood that we had traditional NAC agent with ISE 1.1.

Since new Anyconnect version 4 has come which is used for ISE 1.3 posture assessment however I am not sure if I can use Anyconnect 4 with ISE 1.2 ?  Can you please put light on this ?

if not , do I need to upgrade to ISE 1.3 ? what is the process to upgrade to ISE 1.3 ?

Thanks in advance

[mohanak]

• ISE 1.3 is the minimum release capable of deploying AnyConnect software to an endpoint and posturing that endpoint using the new ISE Posture module in AnyConnect 4.0.
• http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/release/notes/b_Release_Notes_AnyConnect_4_0.html#ID-1454-0000028d
• You can directly upgrade to Cisco ISE, Release 1.3, from any of the following releases:

• Cisco ISE, Release 1.2

• Cisco ISE, Release 1.2.1

• http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_13_chapter_011.html

[vinodjad1234]

Thank you so much for your reply ....

so based on document I can not use Anyconnect 4.0 with ISE 1.2, how about Anyconnect 3.0 ? will it support to ISE 1.2 ?

and what is the recommended method to deploy Anyconnect to client machine ?

is it Predeploy or web deploy through ISE ?

[Venkatesh Attuluri · Accepted solution]

ISE can provision clients with agent and configure agent profiles.You have Client-provisioning policies that enable users to download and install resources on client devices.(Windows and Mac OS X NAC Agents, Cisco NAC Web Agent.