cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1152
Views
1
Helpful
3
Replies

Posture Assessment - NAC Agent x AC

Flavio Costa
Cisco Employee
Cisco Employee

Hi team,

  I want to know what are the differences of doing posture with a NAC Agent x AnyConnect Apex. I know that NAC agent was announce EoS/EoL, and I found some differences between the NAC Agent and the Web Agent on table 41 at the admin guide: http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20.pdf ; But I couldn't find any comparison regarding AC. Can you please help?

Best regards,

.:|:.:|:.  Flavio Costa

CISCO  Virtual Systems Engineer - Security

Sao Paulo, Brazil

flavicor@cisco.com

1 Accepted Solution

Accepted Solutions

Hi Flavio,

Yes, those are posture features.  If you want to utilize the new posture checks in ISE 1.4, you would need to migrate to AnyConnect.

Regards,

-Tim

View solution in original post

3 Replies 3

Timothy Abbott
Cisco Employee
Cisco Employee

Flavio,

There really isn't a difference between NAC agent and AnyConnect from a posture respective.  We basically turned the NAC agent into a module that would run inside of AnyConnect.

Regards,

-Tim

Hi Timothy, thanks for your answer!

  I checked on the compatibility notes for ISE 2.0, the following: "The new features introduced in Cisco ISE, Release 1.4, such as the Service Check (MAC OS X), File Check (MAC OS X), Application Check (MAC OS X), and Patch Management Check (MAC OS X and Windows), are available only with AnyConnect 4.1.00028" I understand that all of the above are posture related features, is that correct? If so, those are the only differences regarding what AnyConnect can do that NAC Agent can't?

Thanks!

.:|:.:|:.  Flavio Costa

CISCO  Virtual Systems Engineer - Security

Sao Paulo, Brazil

flavicor@cisco.com

Hi Flavio,

Yes, those are posture features.  If you want to utilize the new posture checks in ISE 1.4, you would need to migrate to AnyConnect.

Regards,

-Tim