You are here
SEC0336 - ISE 3.0 Posture Assessment (Wired) (Part 3)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
Video Download:
Title: SEC0336 - Video Download $20.00
The video looks at Cisco ISE 3.0 posture assessment with AnyConnect. The first half of the video focuses on Posture Module deployment in a Windows 10 computer. We will perform a posture check in the second half using ClamWin Anti-virus in both compliant and non-compliant state with remediation.
Part 3 of this video covers posture check and remediation
Topic:
- Posture Workcenter
- Network Devices
- AnyConnect Posture Profile and Configuration
- Cisco AnyConnect Client with ISE Posture Module (Windows)
- Client Provisioning Policies
- Client Provisioning Portal
-
Policy Elements
- DACL
- Authorization Profile
- Policy Set
- Authorization Policies
- Posture Compliant/Non-Compliant/Unknown States
-
Posture Policies
- ClamWin Anti-Virus
- Posture Remediation
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
3 comments
Posture for virtual machines
Great tutorial, Metha, thank you. Did it work for you also on Windows virtual machines (VMware)? I got "compliant" result even without AnyConnect installed, because ISE did not detect correctly client OS version (Win 10 Pro) and applied "Posture General Settings > Default Posture Status" setting. Thanks.
Posture for virtual machines
The Windows test machine on all videos is a virtual machine so yes, we are able to get this to work on a VM.
Thank you, I had "Other
Thank you, I had "Other condition" configured in Client Provisioning Policy which was not matched by virtual machine, so provisioning did not run for this specific client. It is working now for Host and Guest as well.