Documentation and books refer to allowing TCP/UDP ports 8905 and 8909 to the ISE servers in the AGENT-REDIRECT ACLs to make sure NAC agent can be prvisioned, be controlled by ISE and allow keepalive traffic. My question is if this all applies only to the NAC agent or if it applies to the AnyConnect Posture module as well, I couldn't have seemed to find this information anywhere. Are 8905 and 8909 ports still used in with:
- AnyConnect provisioning ?
- NSP provisioning ?
- AnyConnect posture module communication and keep alives ?
If not using NAC agent, would it be enough to only include port 8443 to ISE PSN(s) IPs?
