No Policy Server Detected

[subrun.jamil]

Hello,

I got one user who some times can connect to ANY CONNECT VPN and sometimes not. We are doing Posture Validation through ISE with some Approved Antimalware.

When user is not able to connect to the VPN , it always says "NO POLICY SERVER DETECTED" from Cisco ANYCONNECT Client. At that moment from user AC Client it does not show anything from "Security Product" tab. 1st question here when user is not able to connect from ISE is there any way to see why he is failing ?

2nd is obviously how do I resolve this  ?

Note that for unsuccessful attempt I do not see any log at Posture Troubleshooting Section.

[marce1000]

 - Check this thread for hints :

               https://community.cisco.com/t5/network-access-control/ise-no-policy-server-detected/td-p/3883122

 M.

[subrun.jamil]

No , its not the same problem I have. I have the IP Addresses mentioned at Call Home List and Discovery List as well. And problem for certain people for a Specific Vendor. Rest of the other working fine.

Also additional question , Is there a way I can see from ISE ,  what AM , users are successfully postured with ?

[marce1000 · Accepted solution]

 - Check these info's : https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html#wp1075206

                                   https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215419-ise-session-management-and-posture.html

 M.

[hslai]

Please do review marce1000's 2nd link -- ISE Session Management and Posture. Beyond that, please engage Cisco TAC to troubleshoot.

[thomas]

Since this is the ISE forum...

Please provide information about the ISE configuration, logs, errors, and authorization profile for that endpoint's session that is not working.

Create a special rule for that one user to not require posture and see if it works then troubleshoot his posture policy from there.

[subrun.jamil]

Thomas - Liked your idea. But did not need to try that as when tried from other good machine user was able to connect so it was a Posture Complaint Issue and Confusing part is Error Message  "No Policy Server Detected Message"