ISE Posture

[behrouz6408021]

I would like to deploy ISE Posture with Cisco Any connect for our Company with 2000 Users

How Can i Install and deploy ISE Posture Profile to all Users in our Company . What is Solution for this situation ?

[Mike.Cifelli · Accepted solution]

Here are some things to consider based on the limited information provided:
SCCM is a good tool to utilize for deployment of the AnyConnect client + additional modules on the Windows side of the house. Think about if you want to add certain required components into your images for future deployments. There are several items that are required to be deployed to your clients besides just the ISE Posture Profile in order for the whole solution to work. Work on identifying which posture checks you plan to utilize and determine how you plan to push authz policy for clients in each session state (unknown, comlpiant, non-compliant).
I strongly suggest taking a peek at this: https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273#toc-hId--1775761939
Also see here for tutorials: http://labminutes.com/video/sec
HTH!

[behrouz6408021]

Thank you Mike

How can i distribute Posture profile to our company users ?

When i installed Any connect module . How to put profile into any connect ?

[balaji.bandi]

i have suggested some document other post you have posted.

https://community.cisco.com/t5/nso-developer-hub-discussions/ise-posture-with-anyconnect/m-p/4090205/highlight/false#M5264

[Mike.Cifelli]

Take a look into the links provided by all on this post. You have several options. Here are a few that you could rely on:
The ISE AnyConnect Configuration that gets assigned to your Client Provisioning Portal or SCCM. HTH!

[balaji.bandi]

here is the good document for reference:

https://community.cisco.com/t5/security-documents/ise-posture/ta-p/3657443

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273