ASA and ISE Posture Comparison with AnyConnect 4.0

[thomas]

Cisco Identity Services Engine (ISE) Posture	Cisco Adaptive Security Appliance (ASA) Posture
New in Cisco AnyConnect 4.0 Requires Cisco ISE 1.3 or later Posture and remediation Replaces the NAC agent Provisioned by ISE 1.3 or later One agent for wired, wireless, and VPN Client-side validation Utilizes OPSWAT v3 OPSWAT libraries are available through a feed service or uploaded directly to ISE	HostScan is an existing feature Requires ASA Provisioned by ASA HostScan is now separate from AnyConnect 4.0 AnyConnect and clientless SSL VPN Server-side validation Dynamic Access Policies (DAP) enforces policy Utilizes OPSWAT v2 OPSWAT libraries are uploaded directly as part of the HostScan package