03-07-2016 06:54 AM
Hi team,
I want to know what are the differences of doing posture with a NAC Agent x AnyConnect Apex. I know that NAC agent was announce EoS/EoL, and I found some differences between the NAC Agent and the Web Agent on table 41 at the admin guide: http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20.pdf ; But I couldn't find any comparison regarding AC. Can you please help?
Best regards,
.:|:.:|:. Flavio Costa
CISCO Virtual Systems Engineer - Security
Sao Paulo, Brazil
Solved! Go to Solution.
03-07-2016 07:38 AM
Hi Flavio,
Yes, those are posture features. If you want to utilize the new posture checks in ISE 1.4, you would need to migrate to AnyConnect.
Regards,
-Tim
03-07-2016 07:18 AM
Flavio,
There really isn't a difference between NAC agent and AnyConnect from a posture respective. We basically turned the NAC agent into a module that would run inside of AnyConnect.
Regards,
-Tim
03-07-2016 07:27 AM
Hi Timothy, thanks for your answer!
I checked on the compatibility notes for ISE 2.0, the following: "The new features introduced in Cisco ISE, Release 1.4, such as the Service Check (MAC OS X), File Check (MAC OS X), Application Check (MAC OS X), and Patch Management Check (MAC OS X and Windows), are available only with AnyConnect 4.1.00028" I understand that all of the above are posture related features, is that correct? If so, those are the only differences regarding what AnyConnect can do that NAC Agent can't?
Thanks!
.:|:.:|:. Flavio Costa
CISCO Virtual Systems Engineer - Security
Sao Paulo, Brazil
03-07-2016 07:38 AM
Hi Flavio,
Yes, those are posture features. If you want to utilize the new posture checks in ISE 1.4, you would need to migrate to AnyConnect.
Regards,
-Tim
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide