Need to configure Posture check policy for VPN users

[IshwarBamane2910]

Hi all,

Need to configure posture check policy for VPN users.

Can I get any documents for configuration,prerequisites for configuration.

In our network we don't have ASA firewall.so can we enable posture check for VPN user on Fortigate and Palo alto firewall ??? 

Is it a best practice to enable posture check other than ASA firewall ? 

[Mike.Cifelli · Accepted solution]

Can I get any documents for configuration,prerequisites for configuration.

-See the following:

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215236-ise-posture-over-anyconnect-remote-acces.html

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117693-configure-ASA-00.html

http://www.labminutes.com/video/sec

In our network we don't have ASA firewall.so can we enable posture check for VPN user on Fortigate and Palo alto firewall ??? 

-AFAIK no.  There are several Cisco proprietary related components that are utilized in the solution.

[hslai · Accepted solution]

I do not think it would work.

Our teams have not tested VPN posture with 3rd-party network devices. With ASA (or FTD), ISE relies on the NADs to support CoA policy push.