ASA 5585-X Multi context, AnyConnect, and Hostscan

[neteng2323]

I'm testing AnyConnect on an ASA 5585-X in multi-context mode. I've got it working, but hostscan isn't supported. However, it still directs you to the Hostscan feature when you're configuring DAPs, but it doesn't exist. If no Hostscan, then no posture assessment, so what's the purpose of DAPs in MC mode, other than use with ACLs? Not sure if Hostscan will be supported in the future, but it sort of makes DAPs less useful.

Has anyone else experimented with this, or implemented it?

[neteng2323 · Accepted solution]

I got my answer. Cisco is "sunsetting" hostscan, and ISE is the hostscan solution moving forward. So basically if you want to merge your physical ASA environment to virtual, and want to use DAPs in any meaningful way you will need to also implement ISE.

[rangertdc]

Well... ****

[neteng2323]

yeaaaaahhhh.