prerequisite to enable Profiling for posture assessment to check the AV, Patches, OS update

[vinodjad1234]

Hi Experts,

I have wireless set-up with two SSID , one is used for corporate users with dot1x auth and other one for guest using CWA .

I understood that , i do not need to buy any license or pay to cisco for Wireless license however i want to understand for enabling profiling for posture assessment .

I understood that I need have advance license for posture assessment however I am looking out for information about costing to buy advance license and is there any prereuisite to configure posture assessment other than additional license?

[nspasov]

There were a few changes in ISE v1.3:

- Base License = The same

- Plus License = The same (with some more features)

- Advanced License = Apex

- Wireless = Mobility (Now it includes VPN based authentications as well)

So your plan is to run the new version of ISE (1.3) and AnyConnect 4 then you will need to have:

 - ISE Mobility License (Includes Base, Plus and Apex for wireless and VPN)

 - AnyConnect APEX license - This one is on the honer system and it is not installed on ISE

If you plan to use posture on wired as well then instead of the "mobility" license you will need to get:

 - ISE Base

 - ISE Plus

 - ISE Apex

 - AnyConnect Apex

Thank you for rating helpful posts!

[vinodjad1234]

Hi,

Thanks for your reply ...I would be using ISE 1.2 .

Do we have same approach for 1.2 also ?

how about ATP certification ? As per my understanding , we do not need ATP for wireless set-up however for wired and Posture assessment , do we need to go for  ATP program  where we need and submit HLD before activating posture assessment.

Please correct me if i am wrong

[mohanak]

Hi,

Advantage of ATP : if you had gone through ATP process and once completed the submitting of 3 HLD, two meetings will be conducted and after that no need to submit the HLD, the product will be released without Compliance HOLD.

For Non ATP : partner need to submit the HLD for all the deployments.

[nspasov]

In 1.2:

- You will have Base, Plus and Advanced

- You will still need AnyConnect Apex if you want to use AnyConnect 4.0.

Thank you for rating helpful posts!