We have:
ISE: 2.3.0.298
ASA5555 ver 9.7(1)
Anyconnect ver 4.4.0154 VPN module installed only
PC Windows 7
Problem:
- Client establishes VPN connection to ASA
- Client opens web page that matches “redirect” ACL on ASA
- ASA redirects client to ISE provisioning portal listening on tcp/8443
- Client clicks on download link
- File anyconnect-ise-nsa-win-4.5.01044_posture.exe is downloaded
- The utility warns about the pumping of the package anyconnect
- Then it checks the downloaded update
- Next, I understand it is an attempt to install, after which the message appears:
"Automatic software updates are required but cannot be performed while the VPN tunnel is established. Contact your system administrator"
- And further goes the complete rollback of the installation
The question is how to force the NSA to break the connection before trying to install it, or is there another solution?
