Cisco ISE 3.2 and Cisco Secure Client with ISE Posture Issues

Frank Durham — Sat, 02 Aug 2025 03:05:27 GMT

Hi Community..

I have seem to run into a problem testing out ISE Posture via Cisco FTD and Secure Client. I have followed a few videos on line for reference and read this article from Cisco;

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215236-ise-posture-over-anyconnect-remote-acces.html

I believe I have everything properly, but when I initiate a connection on the Secure Client; I get the dreaded "The IPsec VPN connection was terminated due to an authentication failure or timeout". What is strange is authentication is not the issue for these reasons.

If i remove the posture configs from the Policy set and do a simple secure client connection using the same username/password, I am able to connect
When the posture configs are enabled in the policy sets; and I do live logs or reporting, I can see my username for Authorize-Only, the correct policy set was chosen, redirect ACL applied along with downloadable ACL and the posture status says "pending" but no connection on the secure client

TAC is puzzled and still waiting for response. Wanted to ask the community if anyone has seen or experienced this behavior.

Thanks

Frank

Re: Cisco ISE 3.2 and Cisco Secure Client with ISE Posture Issues

MHM Cisco World — Sun, 03 Aug 2025 18:38:08 GMT

start with anyconnect

share screen shot

MHM

topic Re: Cisco ISE 3.2 and Cisco Secure Client with ISE Posture Issues in Network Access Control

Cisco ISE 3.2 and Cisco Secure Client with ISE Posture Issues

Re: Cisco ISE 3.2 and Cisco Secure Client with ISE Posture Issues