topic Re: ISE Posture status issue in Network Access Control

ISE Posture status issue

ymadheka — Wed, 05 Apr 2017 11:42:02 GMT

Hi Team,

We are in a middle of PoV with ISE 2.1 and facing a strange issue wherein the compliance status shows OK in the logs but at the client end the Anyconnect agent shows as unknown policy. The agent version used is 4.3 for anyconnect module and 3.6 for the compliance module. The NAD used here is Cisco switch 3850 and it show the session ID for the client connecting to the wired network.

Kindly advise for any workaround / solution for the issue.

Appreciate for any quick turnaround.

Thanks & Regards,

Yogesh Madhekar

Re: ISE Posture status issue

hslai — Wed, 05 Apr 2017 21:23:03 GMT

I would suggest to open a TAC case. It seems possible CoA not happening correctly or along that line.

Re: ISE Posture status issue

ymadheka — Thu, 06 Apr 2017 07:09:29 GMT

Hi,

We have already opened a TAC case and the engineer has verified the configuration at both ISE and switch level, is it like some known issue may be someone could have encountered till now.

Re: ISE Posture status issue

hslai — Thu, 06 Apr 2017 22:16:17 GMT

No, if all the configurations are correct, it should work. Please continue working with TAC and ask to escalate to BU if needed.