ISE 1.3 Anyconnect deployement

[ibrahim_hassan]

We need to deploy and apply Anyconnect 4.0 with ISE 1.3 as posture client , Anybody have document that describe configuration in details.

[nspasov]

Hello Ibrahim, can you elaborate a bit more on what you need assistance with? For instance, on what type of clients are you planning on deploying the Anyconnect software. Is this for wireless, wired, etc. 

For a Windows based environment, you will need to use something like Microsoft's SCCM or Symantec's Altiris to package and push the AnyConnect software to your Windows endpoints. 

Thank you for rating helpful posts!

[ibrahim_hassan]

Thanks for every one , It is working now after some tries but anyconnect still see the user non-compliant for AV update.

If the user unplug the network cable and plug it again , the user become compliant.

[bhose]

Hi Ibrahim,

Most of what you need in in the AnyConnect config guide.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/b_AnyConnect_Administrator_Guide_chapter_010.html

We have it running in our lab and it is perform much better than NAC Agent.

On ISE you will need to load the agent, create an AnyConnect config and AnyConnect Profile. You will also need to create a VPN profile if you want to remove the VPN panel from the client.

Hope this helps.

[Venkatesh Attuluri]

AnyConnect 4.0 Integration with ISE Version 1.3 Configuration Example

http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/118714-configure-ise-00.html

Posture Services on the Cisco ISE Configuration Guide

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise-posture-00.html