Need to confirm if we can use anyconnect for posturing gp vpn user

[sandesh-dhuri]

One of our customer is using global protect for vpn tunelling, can we posture global protect vpn users using anyconnect and ISE ?

[ahollifield]

No.  Last time I looked PAN did not support CoA or dynamic URL redirection for RAVPN users.  You should use the Posture features provided by Palo Alto or Posture through a SAML flow to whatever IDP you wish that supports device posture.