WIFI connection is disconnecting

[Turki.A.Baqatada]

Hello Dears 

I faced an issue recently that WIFI is disconnects when I use secure client posture and as I checked automatically connect option so the connection disconnect and connect and secure client posture module every time scanning 

In the beginning i though from wifi adapter but when i connect to normal wifi every thing is working fine 

[ahollifield]

Are you using NAM?  Or just posture?  What is the NAD?  Are you drivers up to date? 

https://community.cisco.com/t5/security-documents/how-to-ask-the-community-for-help/ta-p/3704356

[Turki.A.Baqatada]

We are using just posture only  with peap and drivers are up to date

8500 wireless lan controller the client is windows 11 

One thing to add i created authorization policy to exclude the client and work without posture and started work fine 

[ahollifield]

https://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/eos-eol-notice-c51-740222.html

https://www.cisco.com/c/en/us/products/collateral/wireless/8540-wireless-controller/eos-eol-notice-c51-744431.html

Why are you using PEAP?  PEAP uses md4 encryption and should no longer be deployed.  Why not use certificates with EAP-TLS or TEAP?

Is CoA correctly configured on the NAD?  What exactly do the ISE logs say?

[Turki.A.Baqatada]

First of all thank you for your kind reply

Actually laptops are not joind to domain, TEAP needs certificate to be pushed for them and it is difficult to do same so that's why we are using PEAP

For the laptop everthing shows normal in ISE and client it is compliant 

But the issue is after goes to compliant it is scanning againg because the WIFI connection disconnected and connected again also in live session shows terminated 

As I said before could be from wifi adapter but when i connected to other networks worked fine without no issue that's what makes me think about posture 

It is only for one client others working fine even windows 11 so i asked here maybe someone faced this kind of issues and if there is any debug steps i can follow 

[ahollifield]

Well if it’s only one endpoint I would start with what’s different about this one endpoint. Or where it’s physically located in the building; maybe that area has poor wireless coverage or interference?

Also what is the use-case for 802.1X at all here? What is the reason to allow unmanaged/unknown endpoints to join the protected network?