topic Re: Unable to Posture MAC OSX in Network Access Control

Unable to Posture MAC OSX

LabanM — Mon, 25 Jan 2021 17:47:37 GMT

Not sure when this started but we have a few contractors that connect with MAC OSX, when they connect Anyconnect shows the message "Bypassing Anyconnect Scan. Your network is configured to use Cisco NAC agent"

The exact policy set works ok with Windows and posture works fine.
I've double checked all the Anyconnect profiles and posture rules. What am I missing?

Anyconnect 4.9.0.4043

ISE 2.4 Patch 9

Re: Unable to Posture MAC OSX

Mike.Cifelli — Mon, 25 Jan 2021 20:10:13 GMT

It seems that your MAC clients are not hitting your posture policies. Please go to Policy->Posture to view how they are configured for the respective clients. My assumption without seeing your policies is that they are not hitting based on OS config, identity groups, or other conditions. HTH!

Re: Unable to Posture MAC OSX

LabanM — Tue, 26 Jan 2021 16:57:10 GMT

Thanks, got me looking near the right spot. Ended up actually being a condition exclusion in the Client Provisioning policy.