cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
1393
Views
0
Helpful
1
Replies

Anyconnect Hostscan

henrikj
Level 1
Level 1

Hi

I´m doing a new installation with ASA (ver 9.12.9) and Anyconnect Hostscan (Advanced endpoint protection). (ISE posture is not an option).

I´m wondering if it is necessary to install the client hostscan module (called posture module - i believe) in order to do the posture or if anyconnect can do it out of the box (using version 4.7.04056). I want to do a mix of basic and advanced endpoint assessment.

I´ve tested a bit with 2 PC´s - one with posture module installed and one without - the result seems to be the same.

I´m testing for:

Symantec endpoint protection:

Anti malware "installed", real-scan "disabled", version <=14.2

Firewall "installed", real-scan "enabled", version <=14.2

Carbon Black:

Installed

Process:

cb.exe running

 

Even if i try to do remediation (Anti malware not older then 1 day) it works for both PC`s.

 

Why can i configure the "remediation" in both the DAB section and in the CSD->Hostscan menu ?

What is the different ?

Are there some usefull explanation/documentation on howto configure this ? 

i know it is a lot of questions - but it is poorly documented...

 

Regards Henrik

 

1 Reply 1

henrikj
Level 1
Level 1

BTW

I couldn´t get the "Symantec endpoint protection: Anti malware real-scan enabled" to work.

Is it supposed to work ?