nerdexam
Cisco

300-715 · Question #18

Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).

The correct answer is A. TCP 8443 E. TCP 8905. When configuring posture with Cisco ISE, client communication requires TCP 8443 for initial web portal interaction and TCP 8905 for the Cisco AnyConnect Network Access Manager or ISE Posture Agent.

Endpoint Compliance

Question

Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).

Options

  • ATCP 8443
  • BTCP 8906
  • CTCP 443
  • DDTCP80
  • ETCP 8905

How the community answered

(56 responses)
  • A
    91% (51)
  • B
    5% (3)
  • C
    2% (1)
  • D
    2% (1)

Why each option

When configuring posture with Cisco ISE, client communication requires TCP 8443 for initial web portal interaction and TCP 8905 for the Cisco AnyConnect Network Access Manager or ISE Posture Agent.

ATCP 8443Correct

TCP 8443 is used for secure communication between the client's web browser and the Cisco ISE Policy Service Node (PSN) when redirection to a web portal occurs for agent provisioning or initial posture assessment, especially with Client Provisioning Portal (CPP).

BTCP 8906

TCP 8906 is typically used by the Cisco AnyConnect ISE Posture module for discovery phase to ISE for redirection, but 8905 is for the actual agent-to-PSN communication for posture data.

CTCP 443

TCP 443 (standard HTTPS) can be used for general web access, but Cisco ISE specific web portals for guest, BYOD, and posture often use 8443 for their secure web services.

DDTCP80

DTCP80 is not a recognized standard port or protocol for Cisco ISE posture communication; HTTP uses TCP 80, not DTCP.

ETCP 8905Correct

TCP 8905 is the primary port used by the Cisco AnyConnect Network Access Manager (NAM) or the Cisco ISE Posture Agent on the client machine to communicate with the Cisco ISE Policy Service Node (PSN) for ongoing posture assessment and policy enforcement.

Concept tested: Cisco ISE posture communication ports

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_0100.html#concept_AC4E8D7F72494F7495EEB3782D7B483B

Topics

#Cisco ISE#Posture#Network Ports#Firewall Rules

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice