Upgrade Cisco AnyConnect Agent V4.x to Secure Client V5.x

[Thea OEM]

Dear Colleagues,

I have upgrade Cisco AnyConnect Agent V4.x to Secure Client V5.x vai Microsoft SCCM deployment. 

1. SCCM Deployment Successful.
2. Endpoints got all Secure Client Application.
3. Posture file is located to the correct location by SCCM.
4. Configuration file is located to the correct location by SCCM.

*The Endpoint problem

1. No Network Access Manager Icon 
2. Network Access Manager service is Disable 
3. Unable to manual start the Network Access Manager service

Please kindly help advise me!

[ahollifield]

Why use NAM at all?  Why not use the native windows supplicant?  Do you expect NAM to be installed?  

[Thea OEM]

Hi ahollifield,

We used NAM sine we start implementing the cisco ise. we are an enterprise environment. we need more powerful security and feature-rich. so what is your suggestion?

[ahollifield]

Well I would suggest a TAC case for your specific issue. That being said, I would personally recommend moving away from the NAM module. The main driver previously for NAM was EAP-FAST/EAP-Chaining. TEAP is now available in the native Windows Supplicant with handles EAP-Chaining without having to worry about extra software or agents. NAM also has no support for Mac.

The main use-case I still see NAM used for is MACSEC. Do you have MACSEC requirements?

[Thea OEM]

Okay, Thank!