Question

A network engineer is finalizing BYOD onboarding for a corporate campus. Windows and macOS laptops must be provisioned with a certificate and a configured 802.1X supplicant for the secure SSID. During testing, users report that after clicking the onboarding link, they are prompted to download and run a temporary application that configures the device and then does not remain installed. The engineer wants to confirm what component performs this one-time provisioning on the endpoint. Which ISE component is responsible for this behavior?

Accepted Answer

Cisco Network Setup Assistant (NSA), a temporary agent launched from the BYOD portal that provisions the certificate and supplicant, then exits

Answer

Cisco AnyConnect ISE Posture module, which stays resident to continuously evaluate device compliance

Answer

The Native Supplicant Profile installed directly by ISE without any client-side helper application

Answer

Cisco AnyConnect NAM (Network Access Manager), permanently installed to manage 802.1X profiles