ISE posture issue

[R-Wathore]

Hello Team,

I have configured posture policy (AnyConnect ver 5.1.14) for window 10, 11 its working fine but since few day there are few users experiencing intermittent issue

One device requires Wi-Fi posture re-validation approximately every 30 minutes. users getting provision portal pop up and its showing posture status pending and sometime its showing No policy server detected.

[ahollifield]

Why are you still using Windows 10? Also you should try the latest Secure Client.

Is your Posture Feed Update up to date? What version and patch of ISE? Is the user also dropping the wifi connection every 30 minutes? What's the session lifetime on the WLC?

[R-Wathore]

Hello

I am facing same issue on window 10 and 11 as well. 

Yes, posture feed is update date. ISE version is 3.4.0 and patch 6 

on WLC is showing auth pending. 

[prakhardev040428210]

Yes, I am also facing the same issue. 

Below is the problem description:

Endpoints running Cisco AnyConnect with ISE Posture module are intermittently showing posture status as Compliant on the client side, while the corresponding *session status on Cisco ISE remains Pending.

This mismatch occurs most frequently during:

• Roaming events between Meraki access points (e.g., AP5 → AP6).

• Sleep/resume cycles on Windows endpoints.

Observed Symptoms

• Endpoints disconnect or posture state flaps between Compliant and Pending.

• Users experience session disruption during roaming.

• Posture agent reports compliance locally, but ISE does not update the session state.

Current Environment

• Cisco ISE 3.3 Patch 11 with Posture enabled on PSNs.

• Meraki wireless infrastructure.

• Firewall ports 1700, 8449, 8900, 8905 are open end‑to‑end.

• Posture service enabled on PSNs.