ISE-VPN-Posture-Issue

[Marcin Zgola]

I have a similar problem.

I have 2 ASAs setup one with Tunnel Group, Redirect ACL and RAIDUS/ISE Config which when authenticated ISE posture agent runs all the checks.

And another one with LDAP Authentication (NO ISE) and when user authenticate through this one, ISE POsture agent starts the compliancy process again..

How can we filter this?

Thank you

[pcarco]

Hello,

Is it just searching for the policy server or actually running the scan?  Do the two tunnel-groups use the same group-policy ?  why do users that authenticate to ldap have the ISE posture module?  Is this tunnel-group that has LDAP authentication configured for Authorization to ISE ?

Best regards,

Paul

[Marcin Zgola]

Second ASA does not have any ISE configurations.  Client runs the full scan but not all the time. Perhaps it caches information from previous VPN session through other ASA.

I will be working on it closely tomorrow.

[pcarco]

Hello ,

Are you still having the issue ?

Best regards,

Paul