ISE 2.3 Posture and Remediation Compatibility Matrix

[jofische]

Hello,

Does there exist a posture and remediation compatability matrix that can be shared for ISE 2.3 and AnyConnect, AnyConnect stealth, and the Cisco temporal agent?

Thanks!

[Craig Hyps]

https://www.cisco.com/c/en/us/support/security/identity-service-engine-2-3/model.html#CompatibilityInformation

Cisco Identity Services Engine Network Component Compatibility, Release 2.3 - Cisco

/Craig

[jofische]

Thanks Craig.  I'm trying to determine the full capabilities and current limitations of the 2.3 compatible temporal agent vs. AnyConnect.  Do we have anything specific to the temporal agent?

[Craig Hyps · Accepted solution]

Here are key points for AnyConnect Temporal introduced in ISE 2.3:

• Replaces NAC Web agent
• Windows and OSX support
• No Java / ActiveX
• Runs once then uninstalls
• Does not require admin privileges
• Same rich posture checks as AnyConnect (e.g. same application inventory but only one time)
• Only manual remediation
• Downloaded via portal via URL re-direct so options to integrate with Guest, BYOD, CWA, etc.

Unsupported Conditions for AnyConnect Temporal Agent:

• MAC: System Daemon check
• MAC: Daemon or user agent check
• Patch Management up to date check
• Patch Management enabled check
• Disk Encryption check