URL Redirect Posture ISE Firepower don't working

[zinedinzidane]

Hello,

my redirection page launches but displays a timeout. ( https://ip_ISE.:8443/portaletc.....) I opened all the ports between my Annyconnect client and my ISE node. I have a firewall. I ping my ISE, but it still shows no detected policy servers and remains in unknown compliance. I followed the Cisco documentation.https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210523-ISE-posture-style-comparison-for-pre-and.html 
I do not know what to do
Someone would have a solution if he
Please. thank you so much
Annyconnect 4.10.031
ISE 2.7 patch 3
Compliance module 4.3.22

FTD2140

[balaji.bandi]

can you try is that URL works? what Error do you get in the browser?

[zinedinzidane]

No the URL doesnt work.

Error message: the site does not allow connection

Thanks

[balaji.bandi]

That means in the path something blocking, that required investigation, also you need open port 80 also some redirections.

[zinedinzidane]

Thanks but i already open all ports in my firewall :(,. In my ftd, i need open port ? I already create policies any any.......

Help help Many thanks

[zinedinzidane]

Hello,

For information, i open all port betwenn endpoint annyconnect and ISE but i have the same error....... I need to open specifi port betwenn FTD and ISE ??

Thanks 

[thomas · Accepted solution]

HTTPS timeout sounds like a firewall problem from the endpoint to ISE.

Call TAC to troubleshoot.

[Peter Koltl]

Check if you have a rule in the client provisioning policy.

Check the client provisioning portal settings too.