ISE Posture - ASA minimum version

[manvik]

Hi Guys,

Doing ISE posture for Remote VPN users connecting via ASA.

Is there any minimum version of ASA to be used for ISE posture to work?

[Mohammed al Baqari · Accepted solution]

Hi, Cisco ASA Version 9.2.1 because you need CoA support.

**** please remember to rate useful posts

[manvik]

I have applied Apex license to ISE. Purchased Anyconnect Apex license too. Many forums say, Anyconnect Apex shouldn't be applied anywhere.

Should we apply anyconnect Apex license tto ASA.

[Marvin Rhoads]

You are only REQUIRED to install the AnyConnect Apex license on the ASA if the remote access VPN is using any Apex-related features. If your Apex feature use is limited to ISE Posture then the ASA will work fine with just Plus licenses (even though you are required to have the Apex licenses in the sense of the overall deployment).

That said, if you have them go ahead and install the activation key(s). It's one less thing to worry about later during some 3 a.m. troubleshooting call when something isn't working and whoever is looking at the problem wonders why the discrepancy.

[thomas]

Minimum ASA version is stated in the ISE Compatibility Guides.

[manvik]

Thank you Thomas,

That link is really helpful. Can i directly upgrade ASA from 9.12 to 9.8 

This guide says yes, but it's a bit confusing..

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html#ID-2152-0000000a