Question

A security engineer is deploying posture assessment with Cisco Secure Client but the network access devices (a mix of third-party switches) do not support URL redirection. The engineer needs endpoints to still discover the Policy Service Node and complete client provisioning and posture. Which configuration approach allows the posture flow to succeed in this redirectless environment?

Accepted Answer

Configure the Client Provisioning Portal FQDN and set up the Secure Client posture profile discovery hosts (Call Home List / redirectless discovery), so the agent probes the PSN directly without relying on redirect

Answer

Enable Central Web Authentication on the third-party switches and point the redirect ACL to the Client Provisioning Portal

Answer

Configure a DACL on the NADs that permits only the PSN posture ports and rely on the switch to inject the redirect URL via RADIUS

Answer

Deploy the Temporal Agent exclusively, since it does not require any PSN discovery or connection to complete posture