Does Cisco NAC Support Continuous Posture Assessment ?

[dumlutimuralp]

Hi all,

Cisco does not seem to support continuous posture assessment when running out of band or in band ? What I mean is after authentication during authorization phase I ve been assigned to a role and according to that role I receive a posture result, if that posture result is pass then Ive been evaluated as a healthy end point and receive a Certificate. Then the switchport that I am connected to gets assigned to the corporate VLAN. Afterwards till my certificate expires system will always think that I am healthy.

Ive gone through 4.8 release notes, it still does not seem to be supported ?

Any comments are appreciated.

Dumlu

[Farrukh Haroon · Accepted solution]

I think this is mentioned in the release notes; did you check the following section?

http://www.cisco.com/en/US/docs/security/nac/appliance/release_notes/48/48rn.html#wp1105597

Regards

Farrukh

[dumlutimuralp]

Thanks for getting back. Right after I posted this, Ive noticed that it is in fact in 4.8 release notes.

Appreciate it.