cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
953
Views
5
Helpful
2
Replies

Posturing with Cisco CVO

bgajadar
Cisco Employee
Cisco Employee

Hello All

 

Does anyone know if Cisco CVO (88x model ISR) has limitation with posturing or do we have any documentation that I can use for reference?

 

 

 

 

1 Accepted Solution

Accepted Solutions

Here is the compatibility matrix that will give you an idea what is been validated across Cisco platform as well as third party.

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

 

-Krishnan

View solution in original post

2 Replies 2

Surendra
Cisco Employee
Cisco Employee
As long as the CVO router which I believe are ISR G2 routers supports redirection/dACLs etc, I don’t see why it should not support posture. So the real question is, do they support redirection/dACLs/CoA and redirect ACLs? I’ve skimmed through Cisco feature navigator for 891 ISR G2 Image 15.7(3)M train and I do not see the features required for Posture. So I do not believe you can do so but again, I’m not an expert on ISR routers. If you have any local setup, probably try setup it up and see if the attributes being sent from the ISE server are being applied on the interface to which the client connects to.

On the other hand, you could try posture without redirection which removes the dependency over the network device that the endpoint is connected to except for CoA (one of the features that I did not find this IOS supporting on these routers but not 100% sure). Check it out here : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210523-ISE-posture-style-comparison-for-pre-and.html

Here is the compatibility matrix that will give you an idea what is been validated across Cisco platform as well as third party.

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

 

-Krishnan