- Customer is having unmanaged switches in most of their branches and all traffic from the branch goes towards Data Center. So the flow would be USER -> Unmanaged Switch -> Branch Router -> DC Router -> DC Core Switch -> Server or Internet.
(ISE will be deployed centrally in DC). In this case can we use Easyconnect for authentication and then trigger a posture using Anyconnect client ? And in case of user compliant/non-compliant, can we push the DACL to DC core switch to deny the non-compliant user and allow rest of the users? (Basically customer is looking for north-south traffic control for users connected to unmanaged switch).
