topic Re: Unable to detect AnyConnect Posture Agent for everytime in Network Access Control

Unable to detect AnyConnect Posture Agent for everytime

jinyuanbao — Thu, 04 Aug 2022 13:57:00 GMT

Hi guys,

I'm using win10 and ISE 2.4.0.357 patch 8 and have installed anyconnect and scanned as compliant, but everytime the webpage still shows Unable to detect AnyConnect Posture Agent.

I'm thinking maybe it's because the endpoint hasn't got the Compliant_Devices_Access policy rule profile.

But it also shows Compliant in ISE logs, why it don't get the Compliant_Devices_Access Authorization Profile.

Confusing..

Thanks in advance.

Re: Unable to detect AnyConnect Posture Agent for everytime

ahollifield — Thu, 04 Aug 2022 21:40:48 GMT

What is in that "Network_Access_Authentication_Passed" condition? Is your endpoint hitting that? What rule is matched in the Live Logs after the CoA log? Any reason why you are still on Patch 8?

Also:

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-743964.html

Re: Unable to detect AnyConnect Posture Agent for everytime

Marcelo Morais — Wed, 10 Aug 2022 03:41:59 GMT

Hi @jinyuanbao ,

please double check the Posture Status at Work Centers > Posture > Reports > Reports > Posture Reports > Posture Assessment by Endpoint and check the Status column for you Endpoint.

Hope this helps !!!