How to push Cisco Anyconnect Posture module

[Abheesh Kumar]

Hi Folks,

Can somebody guide me how to push Cisco anyconnect posture module via ASA when a user connects anyconnect vpn. I am planing to do VPN posturing with ISE 2.2

[Sheraz.Salim]

Check this link

https://community.cisco.com/t5/security-documents/how-to-configure-posture-with-anyconnect-compliance-module-and/ta-p/3647768

[Mohammed al Baqari · Accepted solution]

>From ASA CLI, you can select which modules to run under webvpn configuration

Step 1

In ASDM go to Configuration > Remote Access VPN > Network (Client)
Access > Group
Policies.
Step 2

Select a group policy and click Edit or Add a new group policy.
Step 3

In the navigation pane, select VPN Policy > AnyConnect Client. At Client
Modules to Download, clickAdd and choose each module you want to add to
this group policy. The modules that are available are the ones you added or
uploaded to the ASA.
Step 4

Click Apply and save your changes to the group policy.

[Abheesh Kumar]

Thanks bro, It works.

-Abheesh

[Marvin Rhoads]

You may want to consider pushing your module and associated settings from ISE vs. from ASA. That makes keeping things in sync easier.

[Abheesh Kumar]

Hi Marvin,
I am looking for automated process of posture module installation. From ISE we can achieve this by redirecting user to a client provision page and from there user need to click for installation.
In my case customer need without any user intervention we need to deploy posture module for VPN users.
Anyway thanks for your info.

-Abheesh