topic Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP in Network Access Control

Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Gh0$t — Wed, 15 Mar 2023 16:10:39 GMT

Use case need to achieve:

Need SAML SSO (Google) with Device Posturing.

Issue which we are facing:

Our approach:

Configured the SAML App and used it in Guest profile to act as the Employee Login and also included the device posturing in the portal configuration.

Our Findings:

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-0/configure-posture.html#:~:text=System%20scan%20not%20required%20on%20current%20Wi%2DFi

Is there any way to achieve this ?

We are using Meraki AP

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Divya Jain — Fri, 31 Mar 2023 08:54:19 GMT

Hi,

ISE - Under Policy, Client provisioning, Resources, ISE posture agent settings, Change Operate on non-802.1X wireless to yes. This forces AnyConnect to always check for posturing regardless of 802.1x.

Usually that can be resolved by checking this value to “YES”. Either from ISE GUI or Manually on the affected client

Alternatively:
Check the posture assessment policies and rules in Cisco ISE and make sure that they are properly configured to detect and remediate non-compliant endpoints. This can be done by reviewing the posture assessment results in the Cisco ISE dashboard and checking the logs for any errors or warnings related to posture assessment.

If the issue persists, it may be helpful to contact Cisco technical support for further assistance and troubleshooting. They can provide more specific guidance and recommendations based on the specific configuration and environment.

-------------------------------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about ISE through our live Ask the Experts (ATXs) session. Check out Cisco ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-endpoint-security-ask-the-experts-resources/ta-p/4394492] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
-------------------------------------------------------------

Regards,
Divya Jain

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Gh0$t — Fri, 31 Mar 2023 08:58:10 GMT

Hello Divya,

Thanks for the response.

But now I am facing the new issue with it.

It is showing the issue with Java.

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Divya Jain — Mon, 03 Apr 2023 11:39:04 GMT

Hi,
This needs latest Java ( plugin) version as per the error. Make sure you have it installed and are on the latest version.

Reagrds,

Divya Jain

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Gh0$t — Mon, 03 Apr 2023 11:49:56 GMT

Hello,

I even tried after installing but it did't work and got the same error again.

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

Divya Jain — Tue, 11 Apr 2023 10:35:18 GMT

Hi,
Did you try doing it on some other system?

if the error is still there, did you check with TAC?

Regards,
Divya Jain

Re: Issue with Posture Compliance on Cisco ISE(3.1) with Meraki AP

anand-hongal — Thu, 13 Jun 2024 08:50:26 GMT

Hi,

i am seeing the same error message on brand new windows 11 systems. this error shows up after the ISE upgrade.

the java update did not help, can you suggest.