Is it possible to configure anyconnect posture checking without ISE?

[mohamedridha]

Hi there

I would like to know if its possible to configure Cisco AnyConnect to do basic posture checking (software, av, definitions etc) without the use of Cisco ISE?

Can something be configured on the ASA or in the XML profile?

Kind Regards

Mohamed

[Rob Ingram · Accepted solution]

Hi,

Yes, you'd use Hostscan on the ASA

Here is so useful links:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/200238-ASA-VPN-posture-with-CSD-DAP-and-AnyCon.html

https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/vpn/asa-95-vpn-config/vpn-hostscan.pdf

HTH