08-13-2018 10:58 AM - edited 03-11-2019 01:48 AM
In my setup, I have ASA Version 9.6(4)8 & ISE 2.2 patch 8. When I try for VPN posturing, I see the below
How can I troubleshoot the issue
Thanks
Nikhil
08-13-2018 12:25 PM
There is good example and step by step guides available here :
May be you have already looked at them(if so ignore it)
There is good guide posture check with step by step logs to verify.
BB
08-13-2018 01:20 PM
08-14-2018 08:36 AM
03-18-2020 09:11 PM
Was this resolve? I am also getting similar issues on random VPN clients which is having ISE posture requirement. This issue is intermittent on our side and not all is getting the issue.
03-19-2020 01:38 AM
Hi Team,
I have also faced the same issues on posturing. As per my experience please check the below.
* check radius request and posturing request are coming on the same PSN.
* check COA between ISE and ASA
* Check the port 8443 is open or not from client to ISE.
* check enroll.cisco.com is resolved from ASA.
For your reference : https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117693-configure-ASA-00.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide