The Cisco Network Administration Control (NAC) Web Agent is typically used for unmanaged PCs and guest access. The agent is temporal, and requires ActiveX or Java to be installed on the endpoints. It supports the Cisco Identity Services Engine (ISE) posture service, but offers less remediation options than that offered by the persistent agents. The web agent is also capable of refreshing endpoint DHCP addresses in the case where policy application enforces a VLAN change.
Cisco Network Administration Control (NAC) Web Agents are not capable of handling user logons and SSO in an 802.1X environment. NAC agents are capable of handling user logons and single sign-on (SSO) in an 802.1X environment.
Cisco Network Administration Control (NAC) Web Agents do not guide users through the posture and remediation process. NAC agents guide users through the posture service, support the posture remediation, and inform the policy service node about an IP address change that occurs while a session is active.
Cisco Network Administration Control (NAC) Web Agents are typically not used on managed devices. NAC agents, available for Windows and Mac computers, are typically used on managed devices.