@DK9 wrote:
Hi folks,
We are using anyconnect for vpn users and we use ISE for posturing the devices .
We are running on version 2.7 patch 9 so our requirment is we need to upgrade the client laptops manage engine desktop client in all laptops we have made a script for this but the problem is script will be working fine only after having sucessfull connection to our network so our requirement is to run the script after the posturing of ise .in version 3.2 we have a script condition where we van achieve this but we cant upgrade so is there any other workaround so that we can achive this.@ise
You can configure ISE to trigger the script upon successful completion of the posture assessment using a CoA policy. This allows the script to be executed automatically once the device is deemed compliant. Alternatively, a posture compliance check can be set up in ISE to verify the presence of the manage engine desktop client on client laptops. If the client passes this compliance check, the script can be triggered to initiate the upgrade process.
Or you can schedule the script to run periodically on client laptops, ensuring that it attempts to upgrade the client laptops until successful. Additionally, leveraging group policies or configuration management tools can streamline the deployment and management of the client upgrade process. These tools often provide options to schedule deployments and ensure compliance with network policies. Exploring the integration of network access control solutions that support running scripts based on posture assessment results may also be beneficial in achieving the desired outcome.
