topic Re: ConnectionData.xml not being created on local machine in Network Access Control

ConnectionData.xml not being created on local machine

JustasVaiciulis85240 — Tue, 09 Feb 2021 14:50:18 GMT

We have issue with CiscoAnyConnect/ISE working with latest Mac OS - BigSur 11.2

Clients (laptops) aren't able to create/update their ConnectionData.xml file in /opt/cisco/anyconnect/iseposture direcotry. In my ISEPostureCFG.xml that is received by the (name)_posture1.isp it means I am set to communicate with ISE server and download, then create/update your ConnectionData.xml., but it does not.

Might it be compatibility issue with newest OS version?

Any ideas appreciated.

Re: ConnectionData.xml not being created on local machine

Marcelo Morais — Tue, 09 Feb 2021 14:09:48 GMT

Hi @JustasVaiciulis85240

the ConnectionData.xml has the history of Posture Servers from earliest to latest. The content of the list might be dynamically updated during next successful connection.

Please take a look at

Work Centers > Posture > Reports > Reports > Posture Reports > Posture Assessment by Endpoint

if you received the Compliant status of your connection.

Hope this helps !!!

Re: ConnectionData.xml not being created on local machine

JustasVaiciulis85240 — Tue, 09 Feb 2021 14:49:27 GMT

Maybe I was not very clear 🙂 ConnectionData.xml does not creates in the location on the machine, where it should be created. And this happens only with newest Mac OS version. Even on BigSur 11.0 version I didn't have this issue.

Re: ConnectionData.xml not being created on local machine

Marcelo Morais — Tue, 09 Feb 2021 15:12:23 GMT

Hi @JustasVaiciulis85240

if my understanding is correct, the ConnectionData.xml is created but in another location? Where?

Re: ConnectionData.xml not being created on local machine

joseponceiii — Tue, 09 Feb 2021 15:38:46 GMT

Hi @JustasVaiciulis85240 What AnyConnect version are you using?

Re: ConnectionData.xml not being created on local machine

Mohammed al Baqari — Tue, 09 Feb 2021 16:22:29 GMT

Hi,

I updated the to latest MAC OSX 11.2 and not issues with detection of PSN
node.

Couple of questions:

1. Are you pointing to your PSNs in ISEPostureCFG.xml under call home. If
yes then you don't need the entries in ConnectionData.xml. post ISE 2.2
connectiondata.xml is only queried if no valid entries present in
iseposturecfg.xml.

I suggest to use it instead of relying on Connectiondata.xml

2. What version of anyconnect are you using? Is this on single machine or
all mac machines?

3. Try to generate dart file for posture to see why its failing.

**** please remember to rate useful posts

Re: ConnectionData.xml not being created on local machine

JustasVaiciulis85240 — Wed, 10 Feb 2021 07:17:58 GMT

Hi, newest I think - 4.9.05042

Re: ConnectionData.xml not being created on local machine

tomas.erapart — Fri, 12 Feb 2021 11:59:40 GMT

Issue resolved after ISE Posture updates were applied to the server.

And automatic updates enabled to avoid similar future issues.

Update Information
_____________________
Last successful update on
2021/02/12 06:23:24
Last update status since ISE was started
Last update attempt at 2021/02/12 06:23:24 was successful
Cisco conditions version
268704.0.0.0
Cisco AV/AS support chart version for windows
241.0.0.0
Cisco AV/AS support chart version for Mac OSX
161.0.0.0
Cisco supported OS version
55.0.0.0