topic Re: Application Visibility & Control in Network Access Control

Application Visibility & Control

dngore — Tue, 05 Jun 2018 01:20:12 GMT

Hi,

We are deploying ISE solution with ISE 2.4, Anyconnect 4.6, and latest Compliance module 4.x.

We are using Application Visibility and Control feature to get information on systems with Anyconnect installed.

But it is observed that Anyconnect client is detected in “unclassified” application category instead of VPN category.

Not sure the reason. Any configuration is required to make it detected in VPN category?

Same thing is happening for IBM IEM software. It should be detected as Patch management software but detected as unclassified category.

Regards,

D.M.Gore

Re: Application Visibility & Control

Jason Kunst — Tue, 05 Jun 2018 01:24:38 GMT

Did you run the posture update as well?

Re: Application Visibility & Control

hslai — Tue, 05 Jun 2018 02:37:52 GMT

Jason is correct that this should be part of the support chart. However, I am seeing a similar issue in my setup so it could be a bug. Let me check with our engineering team.

Re: Application Visibility & Control

hslai — Tue, 05 Jun 2018 14:59:51 GMT

The engineering team is asking for the DART bundle. I've opened CSCvj81092 to track this issue. You may attach the DART to that bug ID or share a copy via Box.

Re: Application Visibility & Control

dngore — Thu, 07 Jun 2018 03:25:27 GMT

Thanks for info.

We did offline posture update but issue is continue - not able to classify Cisco Anyconnect as VPN client.

We have taken Anyconnect DART bundle but customer's email system has attachment size limit, hence could not send yesterday. We are working on alternative solution.

Will upload bundle as soon as I get it.