topic Re: Logging Level AnyConnect NAM in Network Access Control

Logging Level AnyConnect NAM

ksastoqu — Wed, 28 Aug 2019 13:33:55 GMT

Hello,

Is there a way to modify the Logging Level from AnyConnect NAM?

Customer is seeing a lot of logging messages (windows event viewer) from anyconnect. I also see that most of the messages are at debug level.

Re: Logging Level AnyConnect NAM

Colby LeMaire — Wed, 28 Aug 2019 18:17:56 GMT

Check out the following technote:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200592-Understand-AnyConnect-Network-Access-Man.html

If you are using ISE, you can modify the Anyconnect posture profile to either enable or disable debug logs. It is one of the first options within the profile configuration window. See the attached picture.

Re: Logging Level AnyConnect NAM

Jason Kunst — Wed, 28 Aug 2019 19:05:33 GMT

Please also work the the anyconnect community

Re: Logging Level AnyConnect NAM

ksastoqu — Mon, 02 Sep 2019 07:08:26 GMT

Hi, they are not using the Anyconnect Posturing Agent at all. They are using Anyconnect NAM Module. Any other ideas?

Re: Logging Level AnyConnect NAM

Colby LeMaire — Mon, 02 Sep 2019 17:08:45 GMT

Did you review the link that I had posted in the beginning of my response? It is here again:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200592-Understand-AnyConnect-Network-Access-Man.html

Re: Logging Level AnyConnect NAM

nir-r — Tue, 03 Sep 2019 05:52:33 GMT

Hi,

It is a known issue that you can't control Anyconnect log level which generate a lot of logs.

I hope on the next version/build, we will have an option to disable debug logs on event viewer .

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuc67175/?reffering_site=dumpcr

Re: Logging Level AnyConnect NAM

Jason Kunst — Tue, 03 Sep 2019 15:54:24 GMT

please work with the Product managers, you can provide http://cs.co/ise-feedback and ac-mobile-feedback@cisco.com or write them on Social media (Twitter, FB)