cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1714
Views
0
Helpful
1
Replies

Cisco ISE - Posture check stuck in Unknown

Jon Burton
Level 1
Level 1

Hi, We've recently started pushing out Low impact mode and this includes checking for AV+Updates on Windows 7/10 workstations. This worked without issue for a few hundred staff, however we started to find a few people who would get stuck in the Unknown state and the compliance module wouldn't download/run from the PSN. CoA is working fine. Moving the user to another machine and compliance works. Logging into the same machine with a test user and the compliance runs. We found deleting and recreating the profile of the user fixes the issue. However, there is push back from the Client team to accept this as a fix. Nothing seems to be stored in the profile for posture, so I'm at a loss to the cause of the issue. Has anyone encountered issues and is there a fix?

 

Setup: 2*PAN, 2*MNT, 6*PSN nodes (2 PSN groups) sitting behind 2 * F5 LTMs.  

1 Accepted Solution

Accepted Solutions

Jason Kunst
Cisco Employee
Cisco Employee
please check our http://cs.co/ise-help

And see how to ask the community for help, recommend a tac case

View solution in original post

1 Reply 1

Jason Kunst
Cisco Employee
Cisco Employee
please check our http://cs.co/ise-help

And see how to ask the community for help, recommend a tac case