AnyConnect 4.5 with ISE Posture / ISE Compliance module - without run as Administration equirement.

[MS-JK]

Hi All

AnyConnect 4.6 (latest)

Windows 7 & 10

ISE 2.3 P4

Looking for documentation / feedback around running AnyConnect with ISE Posture module and ISE Compliance module. Basically its installed as Administrator (and pushed via SCCM)- but then not run as Administrator. Using machine certs for authentication and having some challenges when AnyConnect isn't run as admin. (example: getting cert validation failure if I don't run it as admin during Auth).

Thanks for feedback!

[Jason Kunst]

Have you looked over this? https://community.cisco.com/t5/security-documents/ise-community-resources/ta-p/3621621#Compliance

[Surendra · Accepted solution]

Looks like something that you can configure for AnyConnect as a software here https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html#ID-1428-0000055f

Not sure if this can be done if you are using just the Posture module but i think you can give it a try.

[MS-JK]

Thanks for sharing the link - the profile already has Certificate Store Override selected and confirmed same is on .xml on end-user.