cisco ise compliance -usb block issue

[mustansirt]

currently, we are using compliance module 4.3.1728.6145 and anyconnect  version 4.9.06037

we are observing that the USB real-time block is not working.

previously it was working and then it stopped. could it be related to the windows patch. how can we troubleshoot this issue?

[balaji.bandi]

check this may help you :

https://community.cisco.com/t5/network-access-control/cisco-ise-usb-port-blocking-problem/m-p/3930027

Troubleshooting :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200508-Configure-ISE-2-1-and-AnyConnect-4-3-Pos.html

[mustansirt]

Hi balaji,

the configuration for USB block looks fine as previously mentioned it was working fine before.

Is there any way we can troubleshoot from any connect end or ise end.

just wanted to know how anyconnect block usb, does it alter the registry to accomplish this.

[michael.nabil10]

I think you can open a ticket with Microsoft as they sometimes windows update can cause this issue