ConnectionData.xml

Andrey Vorobev — Fri, 31 Jan 2020 00:42:15 GMT

Hello All.
I have two ConnectionData.xml files.

The first one in a folder C:\Users\{USERNAME}\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client\

The second one in folder C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client

What is the difference between these two files?

Which one does AC use in the Posture Discovery Process?

Re: ConnectionData.xml

Greg Gibbs — Fri, 31 Jan 2020 03:20:39 GMT

This document has the best detail on posture discovery and flows:

ISE Posture Style Comparison for Pre and Post 2.2

The ConnectionData.xml file is updated automatically by AnyConnect and should not be manually modified.

From that document:

"Probe 2 - At this stage posture module tries PSN FQDNs which are located in ConnectionData.xml. You can find this file in C:\Users\<current user>\AppData\Local\Cisco\Cisco AnyConnect Secure Mobility Client\. Posture module retrievs this file at time of first posture attempt. File contains list of ISE PSNs FQDN. Content of the list might be dynamically updated during next connection attempt. End goal of the probe is to get FQDN of current session owner. Implementation is identical to Probe 1 with the only difference in probe destination selection."

Cheers,

Greg

topic ConnectionData.xml in Network Access Control

ConnectionData.xml

Re: ConnectionData.xml