I think the issue that confuses things is how Cisco interchangeably refers to VPN Posture and Hostscan, as if they are completely synonymous. When checking VPN message history in Anyconnect I see reference to Hostscan so was concerned it was running in parallel with ISE; however I found some documentation online that indicated that after version 3x (I think), Host scan is a separate install....so I went looking at our install for the module name (anyconnect-win-version-posture-predeploy-k9.msi) which is NOT present; ISE only....a good thing it would seem, and I don't see anything in programs and features that indicates both are installed...so about the time I feel confident that the module is not present on my stem, I go poking through my DART logs and find a Any Connect Posture Module Folder with anticipated libcsd.log right along with an AnyConnect ISE Posture log folder. WHAT IS GOING ON. Are we running "combined" Hostscan or not?!?!
If they're going to go out of their way in the documentation to advise NOT combining Hostscan with ISE, they should distinguish between the "hostcan module" and the "VPN posture" function instead of putting HostScan in parenthesis next to every single reference of VPN Posture to confuse those of us that don't have keys to the flippin city.
