Hello Experts,
I recently encountered an issue with AnyConnect and Compliance Module upgrades.
We had ISE AnyConnect configured with 4.9 package and Compliance Module 4.3.1x.x with no options to defer either one.
Clients side were pre-deployed with AnyConnect 4.10 and Compliance Module 4.3.3x.x
The client then failed at Compliance Module download. We downgraded only the Compliance Module in the client side to 4.3.1x.x and it worked.
I read in another discussion that says Compliance Module in ISE needs to be the same as or higher than client side which explains why it worked after the downgrade since it matches ISE's.
However, it seems that for AnyConnect there is no problem if client version is higher. Is this a correct statement or am I missing something?
Thank you in advance,
Ario
