ISE posture without provisioning portal

[Tecnologia@]

Hello guys,

We have a deployment to do, we have two ISE nodes, each of them are running all personas. They're on different locations. One as the primary and the other one as the secondary. And we need to configure posture, but on our case, anyconnect will be deploy via SCCM, and there's no need to redirect the users to the provisioning portal or something like that, because they dont have administrator privilege to install. On the cisco doc i cannot find any good step by step of the deployment without the portal.

The other question is with anyconnect deployment. Is it possible to generate the MSI file including specific modules of anyconnect, and after that just install via SCCM the files to configure the ISE Posture, Umbrella and NAM on the proper folders.

Best regards

[Tecnologia@ · Accepted solution]

Hello guys,

I figure out how to work without redirects, it's necessary to add the "ISEPostureCFG" to the right folder and the process of discovery of ISE will be automatic.. The ISEPostureCFG constains the domain, and in some cases the IP of ISE. Just use the Anyconnect Profile Editor to setup that file.

Best regards