AnyConnect - No policy server detected

[dgaikwad]

Hi Experts,
Going through migration from Cisco NAC Agent to AnyConnect.
Since, we are going location wise, I have called the switch IP address in Client Provisioning policy to do posture check via AnyConnect.
But, the posture check is still happening via NAC Agent and no via AnyConnect, while AnyConnect shows no policy server detected?

[Mike.Cifelli]

How did you configure your AC profile posture agent settings in ISE? In there you need to specify the ip address of your ISE psn/s under the posture protocol section.

[hslai · Accepted solution]

When switching from NAC agent to AnyConnect ISE posture, we have to ensure the ISE client provisioning is configured to use AnyConnect.

Please also take a look at ISE Posture Prescriptive Deployment Guide

[dgaikwad]

The issue has been resolved.
We were using 9200 series switch with Denali OS 16.x, this new OS requires the device-tracking policy IPDT_Policy, command applied.
Applying this command resolved the issue.