ISE 2.1 with NAC Agent 4.9.5.10 SCCM posturing Error

[rcranium1]

Hi There,

We have implemented ISE 2.1 in our environment. Posturing has been implemented utilizing NAC Agent 4.9.5.10 on Windows 10 devices.

We have successfully configured AV/AS posturing and are now looking at implementing the final policy - Windows patch status (critical updates required for successful posture) utilizing our onsite SCCM deployment.

When I enable the posture policy for the Windows critical updates check the NAC agent displays an error noting that the client version is old and not compatible. (screenshot attached).

Is this purely an agent version issue? The interop matrix for NAC agent/ ISE 2.1 lists this version as compatible.

Any assistance with this would be great - the documentation around SCCM posture integration is not abundant.

Thanks

Richard

[Eric Pineda]

Hello Richard,

I realize you might not require a response, but will post it for anyone looking or even if you still need it.

With ISE the NAC Agent can't do SCCM posture check, you must use AnyConnect ISE Posture module. We have a doc bug filed for this:

CSCuv56262

And here is the documentation that specifies you must use ISE and AnyConnect.

regards,

Eric