Can Anyconnect be used for Macsec without needing an ISE?

[Nadav]

Hi everyone,

If I wanted to deploy switch-host Macsec in my Windows domain, is it possible without deploying an ISE server?  

I have Cisco ACS  5.x servers and 3850 switches, but most documentation I've come across delves into ISE regarding Macsec. 

Moreover, is there any Cisco client which is specifically for Macsec without all the other features of Anyconnect?

Thanks in advance :)

[Marvin Rhoads]

You can deploy AnyConnect with only the Network Access Manager (NAM) module. Then use the AnyConnect profile editor to define your wired network policy to include MACSec.

[Nadav]

Thanks for the quick reply. This setup requires only ACS as an authentication server, is this correct?