Cisco CCNP Security Core (SCOR) 350-701Endpoint Security and Secure Network AccessMedium
A global enterprise is deploying Cisco Secure Client (formerly AnyConnect) for remote access VPN. The security team requires that remote users' devices must meet specific security posture requirements (e.g., up-to-date antivirus, operating system patches) before being granted VPN access. Which Cisco Secure Client module is primarily responsible for performing this endpoint posture assessment?
- AUmbrella Roaming Security
- BVPN
- CEndpoint Security Module (ISE Posture)
- DNetwork Visibility Module (NVM)
Show answer & explanationAnswer & explanation
Correct answer: C. Endpoint Security Module (ISE Posture)
The Cisco Secure Client Endpoint Security Module, often referred to as the ISE Posture module, is specifically designed to perform endpoint posture assessment, checking for compliance with security policies before allowing VPN connection or network access.
Why the other options are wrong
- A. Umbrella Roaming Security provides DNS-layer security and web filtering for roaming users, but not detailed endpoint posture assessment for VPN access.
- B. The VPN module establishes the secure tunnel but does not perform detailed endpoint posture assessment.
- D. The Network Visibility Module (NVM) provides visibility into application usage and network traffic, not endpoint posture compliance.
Cisco Secure Client ISE Posture Module
The Cisco Secure Client (AnyConnect) Endpoint Security Module, or ISE Posture module, assesses an endpoint's compliance with security policies before granting VPN or network access.
- Checks for antivirus status, OS updates, firewall, disk encryption.
- Reports posture status to Cisco ASA or Cisco ISE.
- Enforces access based on compliance results.
- Crucial for Zero Trust and secure remote access.
Memory trick: Secure Client's 'Posture Police' ensure device health.