ISE Posture status issue

[ymadheka]

Hi Team,

We are in a middle of PoV with ISE 2.1 and facing a strange issue wherein the compliance status shows OK in the logs but at the client end the Anyconnect agent shows as unknown policy. The agent version used is 4.3 for anyconnect module and 3.6 for the compliance module. The NAD used here is Cisco switch 3850 and it show the session ID for the client connecting to the wired network.

Kindly advise for any workaround / solution for the issue.

Appreciate for any quick turnaround.

Thanks & Regards,

Yogesh Madhekar

[hslai]

I would suggest to open a TAC case. It seems possible CoA not happening correctly or along that line.

[ymadheka]

Hi,

We have already opened a TAC case and the engineer has verified the configuration at both ISE and switch level, is it like some known issue may be someone could have encountered till now.

[hslai]

No, if all the configurations are correct, it should work. Please continue working with TAC and ask to escalate to BU if needed.