cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1017
Views
10
Helpful
7
Replies

ConnectionData.xml not being created on local machine

We have issue with CiscoAnyConnect/ISE working with latest Mac OS - BigSur 11.2

Clients (laptops) aren't able to create/update their ConnectionData.xml file in /opt/cisco/anyconnect/iseposture direcotry. In my ISEPostureCFG.xml that is received by the (name)_posture1.isp it means I am set to communicate with ISE server and download, then create/update your ConnectionData.xml., but it does not.

Might it be compatibility issue with newest OS version?

Any ideas appreciated.

1 ACCEPTED SOLUTION

Accepted Solutions
tomas.erapart
Beginner

Issue resolved after ISE Posture updates were applied to the server.

And automatic updates enabled to avoid similar future issues.

Update Information
_____________________
Last successful update on
2021/02/12 06:23:24
Last update status since ISE was started
Last update attempt at 2021/02/12 06:23:24 was successful
Cisco conditions version
268704.0.0.0
Cisco AV/AS support chart version for windows
241.0.0.0
Cisco AV/AS support chart version for Mac OSX
161.0.0.0
Cisco supported OS version
55.0.0.0

View solution in original post

7 REPLIES 7
Marcelo Morais
Advocate

Hi @JustasVaiciulis85240 

 the ConnectionData.xml has the history of Posture Servers from earliest to latest. The content of the list might be dynamically updated during next successful connection.

Please take a look at

Work Centers > Posture > Reports > Reports > Posture Reports > Posture Assessment by Endpoint

if you received the Compliant status of your connection.

 

Hope this helps !!!

Maybe I was not very clear  ConnectionData.xml does not creates in the location on the machine, where it should be created. And this happens only with newest Mac OS version. Even on BigSur 11.0 version I didn't have this issue. 

Hi @JustasVaiciulis85240 

 if my understanding is correct, the ConnectionData.xml is created but in another location? Where?

Hi,

I updated the to latest MAC OSX 11.2 and not issues with detection of PSN
node.

Couple of questions:

1. Are you pointing to your PSNs in ISEPostureCFG.xml under call home. If
yes then you don't need the entries in ConnectionData.xml. post ISE 2.2
connectiondata.xml is only queried if no valid entries present in
iseposturecfg.xml.

I suggest to use it instead of relying on Connectiondata.xml

2. What version of anyconnect are you using? Is this on single machine or
all mac machines?

3. Try to generate dart file for posture to see why its failing.


**** please remember to rate useful posts
joseponceiii
Beginner

Hi @JustasVaiciulis85240 What AnyConnect version are you using?

Hi, newest I think - 4.9.05042

tomas.erapart
Beginner

Issue resolved after ISE Posture updates were applied to the server.

And automatic updates enabled to avoid similar future issues.

Update Information
_____________________
Last successful update on
2021/02/12 06:23:24
Last update status since ISE was started
Last update attempt at 2021/02/12 06:23:24 was successful
Cisco conditions version
268704.0.0.0
Cisco AV/AS support chart version for windows
241.0.0.0
Cisco AV/AS support chart version for Mac OSX
161.0.0.0
Cisco supported OS version
55.0.0.0

View solution in original post

Content for Community-Ad