topic Re: Skip AnyConnect on some SSIDs. in Network Access Control

Skip AnyConnect on some SSIDs.

Dustin Anderson — Wed, 12 Oct 2022 18:56:06 GMT

So, the Client Provisioning Policy is set to apply AnyConnect to windows based PCs. How can I skip this for say BYOD or Guest SSID?

I can use Normalized Radius SSID contains BYOD in rules, but it doesn't exist in the provisioning section.

Re: Skip AnyConnect on some SSIDs.

ahollifield — Wed, 12 Oct 2022 19:17:43 GMT

Make sure your authz policies aren't redirecting to the Client Provisioning Portal for clients you don't want to provision. If I am understanding your question correctly?

Re: Skip AnyConnect on some SSIDs.

Dustin Anderson — Wed, 12 Oct 2022 19:51:56 GMT

Well, we were testing BYOD and an Apple iPad was prompting to install software. We don't require software so I was able to disable the provisioning policy to stop it, but we do require AnyConnect for PC's, but I don't want it to prompt to install on BYOD.

I still need to do some testing as the PCs I have already have AnyConnect, but want to make sure it doesn't think it's needed for BYOD/Guest.

Re: Skip AnyConnect on some SSIDs.

ahollifield — Wed, 12 Oct 2022 20:20:53 GMT

Well it depends on your policies. Are you checking for posture or redirecting on all of your policies? Is this a single SSID? Why not do a "corporate" SSID that requires Posture and then a different SSID (BYOD) that doesn't?

Re: Skip AnyConnect on some SSIDs.

Dustin Anderson — Wed, 12 Oct 2022 21:59:55 GMT

yeah, separate SSIDs. Not sure why the Apple device triggered for an install as it's not set for posture at all, so wanted to make sure windows didn't trigger on BYOD.