collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: ISE posture using predeploy method and posture discovery  (Read 14960 times)

Offline Ted

  • Cisco Newbie
  • *
  • Posts: 10
  • Reputation: 0
  • Certification: CCNP
ISE posture using predeploy method and posture discovery
« on: October 07, 2015, 08:43:33 PM »
Hi All,
We have a scenario to pre-deploy any-connect 4.x NAM and posture modules to corporate PCs. Pre-deployment is using a windows software distribution method for the any-connect packages and the profiles (created using profile editor).  Because we will not use the CPP method of provisioning how does the posture module discover the ISE hosts.  There are three PSN nodes in a distributed setup and in node groups.

My understanding is to keep the discovery host field black and let the posture agent to identify the PSNs. In a pre-deployment scenario how does this work because there is no CPP redirection using a browser?
 

Thanks in advance.

Regards
Ted

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 400
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: ISE posture using predeploy method and posture discovery
« Reply #1 on: October 08, 2015, 09:56:41 AM »
As long as ISE returns a posture redirect URL, the posture agent will contact whatever ISE node listed in that URL without using having to open a browser. So set everything up normally and the only difference would be user not having to download the agent through the web.

Offline Ted

  • Cisco Newbie
  • *
  • Posts: 10
  • Reputation: 0
  • Certification: CCNP
Re: ISE posture using predeploy method and posture discovery
« Reply #2 on: October 08, 2015, 03:23:59 PM »
Hi MC

Thanks for the reply and will give it a go.
just to clarify,how would the agent will try to reach the PSNs first initially as there is no browser is used to do a redirection and to create a session?


Ted

« Last Edit: October 08, 2015, 05:06:52 PM by Ted »

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 400
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: ISE posture using predeploy method and posture discovery
« Reply #3 on: October 09, 2015, 10:32:48 AM »
I believe the agent should make its own web connection on the background, hit the redirect URL, and find out about ISE node that way.

 

Related Topics

  Subject / Started by Replies Last post
5 Replies
31109 Views
Last post June 30, 2015, 03:03:40 PM
by MC
2 Replies
13373 Views
Last post October 11, 2015, 03:32:04 PM
by Ted
2 Replies
18275 Views
Last post April 29, 2019, 11:33:12 PM
by crismonilla

SimplePortal 2.3.7 © 2008-2024, SimplePortal