ISE 2.4 Machine Authentication with AnyConnect NAM failing

[wafikmaher]

Machine Authentication while using the Windows Supplicant is succeeding (live log attached). Machine Authentication while using the AnyConnect NAM (profile attached), is failing (live log attached).

NAM log shows something which is not clear:

24210 Looking up User in Internal Users IDStore - host/W7PC-CORP.demo.local
24216 The user is not found in the internal users identity store
15013 Selected Identity Source - All_AD_Join_Points
24432 Looking up user in Active Directory - All_AD_Join_Points
24325 Resolving identity - employee1@demo.local

Why the user got changed from host/W7PC-CORP.demo.local, to employee1@demo.local, which will fail the group membership condition.

[paul]

You aren't comparing apples to apples. The windows supplicant is correctly configured to do PEAP computer authentication.  It looks like you have NAM configured to do EAP-FAST computer and user credentials.  Configure your NAM to do just PEAP computer to mimic what you are doing with the windows supplicant.  What is your ultimate goal for authentication?