Posture Implementation

[Turki.A.Baqatada]

We are going to implement posture and mainly any connect required for posture as you know, so if the client doesn't have any connect is there any way that client when connect to the posture SSID ISE provide any connect to client for completing the  posture steps 

[Rob Ingram]

@Turki.A.Baqatada you can use the ISE Client Provisioning Portal. The user will connect and be redirected to the portal and download the anyconnect client.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_configure_client_provisioning.pdf

https://community.cisco.com/t5/security-knowledge-base/client-provisioning-with-cisco-ise-without-posture-validation/ta-p/3929277

[ahollifield · Accepted solution]

You can use Temporal Agent or Agentless if you don't want/can't use AnyConnect: https://community.cisco.com/t5/security-knowledge-base/ise-posture-prescriptive-deployment-guide/ta-p/3680273

If you do choose to use AnyConnect note that you must also have Secure Client Premier licenses.