ISE + AnyConnect Policy Set

[camo]

Hello all,

Is there a way to make different policy set based on client supplicant?

if AnyConnect; then Allowed Protocol is FAST

else Allowed Protocol is PEAP

The problem is that we have some people with AnyConnect and others with windows native supplicant. The allowed protocol is PEAP and FAST.

But Anyconnect has trouble to connect and the log in ISE says that

supplicant has abandoned EAP Session and Started new.

ISE is proposing PEAP to Anyconnect.

Thanks.

[hslai]

What you asking is not possible. You amy try setting the preferred EAP protocol to EAP-FAST.

AnyConnect NAM and ISE should be able to negotiate and agree on EAP protocols to use. I hope you are using the latest AnyConnect release. Please engage Cisco TAC if you still need help.