Native ISE vs Anyconnect posture module

[benjmoor]

I've got a customer who wants to know what the difference is from the Anyconnect posture module and what ISE (currently ISE 2.3) can see without the posture module.  Does anyone have something documenting this?

[Nidhi · Accepted solution]

The visibility from ISE is completely different from Posture use case. ISE visibility  tells you what kind of endpoint is connected in the network, who the user is, where it is , how it is connected etc. 

Anyconnect Posture module provides you information about the  endpoint and you can create posture checks to verify updates/patches, softwares/applications  and a lot of other conditions based on your security / Compliance requirement.  

I suggest you go through some training content here - https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944