topic Re: No Policy Server Detected in Network Access Control

No Policy Server Detected

subrun.jamil — Thu, 10 Dec 2020 01:24:49 GMT

Hello,

I got one user who some times can connect to ANY CONNECT VPN and sometimes not. We are doing Posture Validation through ISE with some Approved Antimalware.

When user is not able to connect to the VPN , it always says "NO POLICY SERVER DETECTED" from Cisco ANYCONNECT Client. At that moment from user AC Client it does not show anything from "Security Product" tab. 1st question here when user is not able to connect from ISE is there any way to see why he is failing ?

2nd is obviously how do I resolve this ?

Note that for unsuccessful attempt I do not see any log at Posture Troubleshooting Section.

Re: No Policy Server Detected

Mark Elsen — Thu, 10 Dec 2020 08:05:22 GMT

- Check this thread for hints :

https://community.cisco.com/t5/network-access-control/ise-no-policy-server-detected/td-p/3883122

Re: No Policy Server Detected

subrun.jamil — Thu, 10 Dec 2020 13:48:33 GMT

No , its not the same problem I have. I have the IP Addresses mentioned at Call Home List and Discovery List as well. And problem for certain people for a Specific Vendor. Rest of the other working fine.

Also additional question , Is there a way I can see from ISE , what AM , users are successfully postured with ?

Re: No Policy Server Detected

Mark Elsen — Thu, 10 Dec 2020 16:54:38 GMT

- Check these info's : https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html#wp1075206

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215419-ise-session-management-and-posture.html

Re: No Policy Server Detected

thomas — Tue, 15 Dec 2020 04:35:08 GMT

Since this is the ISE forum...

Please provide information about the ISE configuration, logs, errors, and authorization profile for that endpoint's session that is not working.

Create a special rule for that one user to not require posture and see if it works then troubleshoot his posture policy from there.

Re: No Policy Server Detected

subrun.jamil — Tue, 22 Dec 2020 03:06:16 GMT

Thomas - Liked your idea. But did not need to try that as when tried from other good machine user was able to connect so it was a Posture Complaint Issue and Confusing part is Error Message "No Policy Server Detected Message"

Re: No Policy Server Detected

hslai — Wed, 23 Dec 2020 01:49:14 GMT

Please do review marce1000's 2nd link -- ISE Session Management and Posture. Beyond that, please engage Cisco TAC to troubleshoot.