https://community.cisco.com/t5/network-access-control/cisco-anyconnect/m-p/4789892#M580326 <P>This is not related to ISE, so it would likely be a better question on the VPN community board - <A href="https://community.cisco.com/t5/vpn/bd-p/6001-discussions-vpn" target="_blank">https://community.cisco.com/t5/vpn/bd-p/6001-discussions-vpn</A></P> <P>&nbsp;</P> Wed, 08 Mar 2023 22:23:24 GMT Greg Gibbs 2023-03-08T22:23:24Z https://community.cisco.com/t5/network-access-control/cisco-anyconnect/m-p/4789499#M580313 <P><SPAN class="tabs2_section tabs2_section_1 tabs2_section1 tab_section" data-header-only="false" data-section-id="8793d5ff0a0a3c08548b83ca00e3bc1a" aria-hidden="false" aria-labelledby="section_tab.8793d5ff0a0a3c08548b83ca00e3bc1a"><SPAN class="section " data-header-only="false"><SPAN>We are completing the VPN migration to any connect and our security team noticed that the local "ciscovpnuser" Windows user is acting suspiciously, running commands and scripts with policy bypass,&nbsp;<BR /><BR /></SPAN></SPAN></SPAN></P> Thu, 09 Mar 2023 07:07:29 GMT https://community.cisco.com/t5/network-access-control/cisco-anyconnect/m-p/4789499#M580313 Amen 2023-03-09T07:07:29Z https://community.cisco.com/t5/network-access-control/cisco-anyconnect/m-p/4789892#M580326 <P>This is not related to ISE, so it would likely be a better question on the VPN community board - <A href="https://community.cisco.com/t5/vpn/bd-p/6001-discussions-vpn" target="_blank">https://community.cisco.com/t5/vpn/bd-p/6001-discussions-vpn</A></P> <P>&nbsp;</P> Wed, 08 Mar 2023 22:23:24 GMT https://community.cisco.com/t5/network-access-control/cisco-anyconnect/m-p/4789892#M580326 Greg Gibbs 2023-03-08T22:23:24Z