ISE 3.0 complaint user unable to access shared drive

[Sunny Lalwani]

Hello,

Frequently few users are facing issue in accessing the shared drive even being complaint and correct policy applied with permit all. Anyconnect software in user PC also shows complaint.

Solution: when user repair the network (initiate re-authentication), user would be able to access the shared drive. 

[ahollifield]

So your posture flow isn't completing correctly.  Any logs on ISE to share?  What ISE version and patch level? What AnyConnect version?

Also see: https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356

[Sunny Lalwani]

Its is ISE 3.0 patch 2

Posture flow is completing correctly. When user connects to network, posture completes with complaint, and that time user has access of shared drive. However, after few hours, users unable to access shared drive, still he is connected to network and complaint.

logs of affected user and non-affected user are same. ISE is not showing anything.