You are here
SEC0057 - ISE 1.1 Posture Assessment with Web Agent
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video extends our knowledge on Cisco ISE posture assessment to guest machines that do not have NAC Agent installed. Continuing on from our previous NAC Agent videos, we will be performing basic Antivirus software install check on a guest machine using the temporal NAC Web Agent. We will look at both situations where the posture check passes and fails and ability to switch user to a different VLAN upon being compliant.
Topic:
- Authorization Policies
- Posture Policies
- Client Provisioning Policies
-
Policy Elements
- Results (Authorization Profile, dACL, VLAN)
- Guest Portal and Self-Service
- Cisco Web Agent (Windows)
- NAC Compliant/Non-Compliant/Unknown States
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
2 comments
Almost guest users are from
Almost guest users are from other domains, and the computer does not has admin rights. How Can I posture w webnac agent without user admin rights?
To our knwoledge, admin right
To our knwoledge, admin right is required and there is no way around it as the agent needs to look through the user machine. You might want to double check with Cisco on this one.