ConnectionData.xml not being created on local machine

[JustasVaiciulis85240]

We have issue with CiscoAnyConnect/ISE working with latest Mac OS - BigSur 11.2

Clients (laptops) aren't able to create/update their ConnectionData.xml file in /opt/cisco/anyconnect/iseposture direcotry. In my ISEPostureCFG.xml that is received by the (name)_posture1.isp it means I am set to communicate with ISE server and download, then create/update your ConnectionData.xml., but it does not.

Might it be compatibility issue with newest OS version?

Any ideas appreciated.

[Marcelo Morais]

Hi @JustasVaiciulis85240 

 the ConnectionData.xml has the history of Posture Servers from earliest to latest. The content of the list might be dynamically updated during next successful connection.

Please take a look at

Work Centers > Posture > Reports > Reports > Posture Reports > Posture Assessment by Endpoint

if you received the Compliant status of your connection.

Hope this helps !!!

[JustasVaiciulis85240]

Maybe I was not very clear  ConnectionData.xml does not creates in the location on the machine, where it should be created. And this happens only with newest Mac OS version. Even on BigSur 11.0 version I didn't have this issue. 

[Marcelo Morais]

Hi @JustasVaiciulis85240 

 if my understanding is correct, the ConnectionData.xml is created but in another location? Where?

[Mohammed al Baqari]

Hi,

I updated the to latest MAC OSX 11.2 and not issues with detection of PSN
node.

Couple of questions:

1. Are you pointing to your PSNs in ISEPostureCFG.xml under call home. If
yes then you don't need the entries in ConnectionData.xml. post ISE 2.2
connectiondata.xml is only queried if no valid entries present in
iseposturecfg.xml.

I suggest to use it instead of relying on Connectiondata.xml

2. What version of anyconnect are you using? Is this on single machine or
all mac machines?

3. Try to generate dart file for posture to see why its failing.


**** please remember to rate useful posts

[joseponceiii]

Hi @JustasVaiciulis85240 What AnyConnect version are you using?

[JustasVaiciulis85240]

Hi, newest I think - 4.9.05042

[tomas.erapart · Accepted solution]

Issue resolved after ISE Posture updates were applied to the server.

And automatic updates enabled to avoid similar future issues.

Update Information
_____________________
Last successful update on
2021/02/12 06:23:24
Last update status since ISE was started
Last update attempt at 2021/02/12 06:23:24 was successful
Cisco conditions version
268704.0.0.0
Cisco AV/AS support chart version for windows
241.0.0.0
Cisco AV/AS support chart version for Mac OSX
161.0.0.0
Cisco supported OS version
55.0.0.0