Anyconnect Posture without CCP

[munish.dhiman1]

Hi All,

I am working on Cisco 2.6 (Without Patch) version and want to test Laptop posture with Any connect module manually installed on Laptop. I have installed the module and created .xml configuration with Profile editor. 

Now, it does not matter if I change call host list, server name rules, discovery host but the module does not detect any policy server. I tried multiple combinations of configurations.

Even the client gets authenticated successfully and access to the network, but any connect says "No policy server detected"

Am I missing something? Can someone send me the exact configuration for distributed deployment.

regards,

MD

[Mike.Cifelli]

Please see here for a detailed guide on how to setup ISE posture assessment.
https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

[munish.dhiman1 · Accepted solution]

Thanks Mike .
It was not a configuration issue but file location issue. Fixed by changing file location.

Regards,
MD

[Peter Koltl]

You can test the URLs in a browser the posture module is supposed to contact to:

https://<PSN-FQDN>:8905/auth/ng-discovery

https://<PSN-FQDN>:8443/auth/status