Meraki MS switches and ISE posture

[charles07]

Has anyone done Cisco ISE Posture for endpoint devices like laptop, desktop etc with Meraki MS switches in the network. Posture conditions are Domain joined, AV etc.

Should 802.1x be configured on switches for this? It's ok if nay system is connected to nay port in the switch. Once posture conditions are met they should be permitted to the network.

[alemabrahao]

It's fully supported

Please see our compatibility matrix

https://communities.cisco.com/docs/DOC-68192?mobileredirect=true

[charles07]

Thank you,

should 802.1x configured on switches for the basic ISE posture to work.
are there any configuration document for Meraki switch config for ISE posture.

[alemabrahao]

In this same document there is a guide.

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-...

[GIdenJoe]

Since the posture check is on the endpoint itself ISE will decide what to send to the switch for network access.  There is no other input needed than what the endpoint agent provides.  So the switch will not need to use any special features for it to work.

[charles07]

Thank you @GIdenJoe when a user first time connects to local network, how can they redirected to the ISE portal to download and install ISE agent. Whenever a new user connects he/she needs to be redirected to download and install ISE posture agent, once posture is successful they'll be permitted to the network.
Thanks in advance.

[charles07]

Any solution on this???

[charles07 · Accepted solution]

i did the setup successfully referring different docs. In below link i have outlined the steps followed.

https://community.meraki.com/t5/Switching/Meraki-MS-Wired-Posture-with-Cisco-ISE/td-p/220229