ISE NAC Agent (Anyconnect)

[raksec]

Hello Experts,

Have two questions on ISE NAC agent:

Is NAC agent automatically upgradeable without user involvement?

AnyConnect agent UI tile is hidden from the end user client in stealthmode. Does stealthmode prevents the user from uninstalling and turning off the agent services?

Thanks,

Rakesh Kumar

[hslai · Accepted solution]

If ISE NAC agent referring to AnyConnect ISE Posture module, then yes, it will upgrade from the headend (ASA or ISE) if newer versions detected with the user to click anything.

ISE Posture stealth mode does not prevent the two actions you asked about. The service is still visible in Microsoft system services list and the module listed in the installed software.