My Customer is implementing ISE with Nexpose but testing with VPN posture users.
We are following this document.
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/200974-Configure-ISE-2-2-Threat-Centric-NAC-TC.html
Why I am asking because in VPN posture, we don’t get the mac-address but in this flow, we need this information. Refer the flow in the document.
For example: MNT node submits SCAN to TC-NAC node (using Admin WebApp) using this data:
- MAC Address
- IP Address
- Scan Interval
- Periodic Scan Enabled
- Originating PSN
Will this flow work ?
or What is the alternative solution?
Please advise.
