Solved: Re: No Policy Server Detected

subrun.jamil · ‎12-09-2020

Hello,

I got one user who some times can connect to ANY CONNECT VPN and sometimes not. We are doing Posture Validation through ISE with some Approved Antimalware.

When user is not able to connect to the VPN , it always says "NO POLICY SERVER DETECTED" from Cisco ANYCONNECT Client. At that moment from user AC Client it does not show anything from "Security Product" tab. 1st question here when user is not able to connect from ISE is there any way to see why he is failing ?

2nd is obviously how do I resolve this ?

Note that for unsuccessful attempt I do not see any log at Posture Troubleshooting Section.

marce1000 · ‎12-10-2020

- Check these info's : https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html#wp1075206

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215419-ise-session-management-and-posture.html

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

marce1000 · ‎12-10-2020

- Check this thread for hints :

https://community.cisco.com/t5/network-access-control/ise-no-policy-server-detected/td-p/3883122

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

subrun.jamil · ‎12-10-2020

No , its not the same problem I have. I have the IP Addresses mentioned at Call Home List and Discovery List as well. And problem for certain people for a Specific Vendor. Rest of the other working fine.

Also additional question , Is there a way I can see from ISE , what AM , users are successfully postured with ?

marce1000 · ‎12-10-2020

- Check these info's : https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html#wp1075206

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215419-ise-session-management-and-posture.html

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

hslai · ‎12-22-2020

Please do review marce1000's 2nd link -- ISE Session Management and Posture. Beyond that, please engage Cisco TAC to troubleshoot.

thomas · ‎12-14-2020

Since this is the ISE forum...

Please provide information about the ISE configuration, logs, errors, and authorization profile for that endpoint's session that is not working.

Create a special rule for that one user to not require posture and see if it works then troubleshoot his posture policy from there.

subrun.jamil · ‎12-21-2020

Thomas - Liked your idea. But did not need to try that as when tried from other good machine user was able to connect so it was a Posture Complaint Issue and Confusing part is Error Message "No Policy Server Detected Message"